CCNA Network Services and Security Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Authentication

  Why it's wrong here

  Authentication is the AAA step that verifies the identity of a user by validating credentials such as usernames, passwords, digital certificates, or tokens. It answers the question 'who are you?', establishing that the user is legitimate, but it does not specify what that user is permitted to do. Determining permitted actions is a separate function reserved for authorization.

  When this WOULD be correct

  If the question asked about the process of verifying a user's identity before they can access resources, then 'Authentication' would be the correct answer. For example, a question could specify the steps taken to confirm user credentials during a login process.

• ✓

  Authorization

  Why this is correct

  Authorization is the AAA process that determines the specific permissions, access rights, and allowed actions for an authenticated user. It defines what resources, commands, or services the user can use, effectively answering the question 'what can this user do?'. In Cisco configurations, this is often implemented via named permission lists or attribute-value pairs on an AAA server.

• ✗

  Accounting

  Why it's wrong here

  Accounting is the AAA component that records and audits user activity, tracking sessions, data usage, commands executed, and resources consumed. It answers 'what did the user do?' for billing, forensics, or monitoring purposes, but it does not define the user's permitted capabilities. As a post-authentication logging function, it is unrelated to determining the scope of user rights.

  When this WOULD be correct

  If the question asked about the function that tracks user actions and resource consumption in a network, then 'Accounting' would be the correct answer. For example, a question might state, 'Which AAA function logs user activity for auditing purposes?'

• ✗

  Encryption

  Why it's wrong here

  Encryption is a data confidentiality technique that uses cryptographic algorithms to convert readable data into a protected format, preventing unauthorized observation during transmission or storage. It is not a component of the AAA framework and does not control or define user permissions; it secures data, not access. Protocols like IPsec and TLS provide encryption but are separate layer of network security.

  When this WOULD be correct

  If the question asked which function is responsible for securing data during transmission or storage, then encryption would be the correct answer. For example, a question could state, 'What method protects user credentials during transmission?'

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”