200-301 Question 448
Select 3A network administrator is implementing a new security system for the company's network. The system will ensure that users are first verified before accessing the network, only permitted actions are allowed based on their roles, and detailed logs are kept of all user activities. Which of the following concepts are being utilized in this scenario?
- A
Authentication
- B
Authorization
- C
Accounting
- D
Encryption
- E
Data Integrity
Show answer and explanation
Correct answers: A, B, C
Explanation
The scenario describes three key security concepts: authentication (verifying user identity), authorization (restricting access based on roles), and accounting (tracking user activities). These are collectively referred to as AAA (Authentication, Authorization, and Accounting) and form the foundation of secure network access control. Encryption and data integrity are also important security measures, but they are not directly relevant to this scenario.
- A. Correct.
Authentication is the process of verifying the identity of a user or device. In this scenario, users are being verified before they access the network, which directly relates to authentication.
- B. Correct.
Authorization is the process of determining what actions or resources a user is allowed to access based on their role or permissions. The scenario describes allowing only permitted actions, which aligns with authorization.
- C. Correct.
Accounting involves tracking and logging user activities, such as access times and actions performed. The detailed logs mentioned in the scenario align with the accounting concept.
- D. Incorrect.
Encryption refers to the process of securing data by converting it into a coded format to prevent unauthorized access. While important, encryption is not directly mentioned in this scenario.
- E. Incorrect.
Data integrity ensures that data is accurate and has not been altered or tampered with. This is not part of the described scenario, which focuses on authentication, authorization, and accounting.