200-301 Question 449
Select 3A network administrator is configuring access to a corporate network. They use a RADIUS server to ensure that only authorized users can access resources and track user activity. Which of the following correctly demonstrates the roles of authentication, authorization, and accounting in this process?
- A
Authentication verifies the user's identity using credentials like a username and password.
- B
Authorization determines which resources the user is allowed to access after authentication.
- C
Accounting involves encrypting data to protect user activity from eavesdropping.
- D
Authorization ensures that the user's credentials are valid before granting access.
- E
Accounting tracks user actions and resource usage for auditing purposes.
Show answer and explanation
Correct answers: A, B, E
Explanation
Authentication, authorization, and accounting (AAA) are distinct but related concepts in network security. Authentication focuses on verifying a user's identity, authorization specifies their level of access, and accounting tracks their activities for auditing purposes. Together, they ensure secure and controlled access to network resources.
- A. Correct.
Authentication is the process of verifying a user's identity, such as by checking a username and password. This is correct.
- B. Correct.
Authorization determines what level of access a user has after they are authenticated. This is correct.
- C. Incorrect.
Accounting does not involve encrypting data; instead, it tracks user activity and resource usage. This is incorrect.
- D. Incorrect.
Authorization does not validate credentials; this is part of the authentication process. This is incorrect.
- E. Correct.
Accounting tracks user actions and resource usage, such as logins and resource consumption, which can be used for auditing purposes. This is correct.