Match each AAA component or related term to its most accurate meaning.

Technical deep dive

How to think about this question

AAA stands for Authentication, Authorization, and Accounting, a fundamental security framework used in Cisco networking to control user access and track user activities. Authentication is the process that verifies the identity of a user or device before granting access to network resources. Authorization follows by determining which resources or commands the authenticated user is permitted to access or execute. Accounting then records the details of user activities, such as login times and executed commands, providing an audit trail for security and compliance purposes. In Cisco devices, AAA can be implemented using various methods, including local databases, RADIUS, or TACACS+ servers. The local database refers to the device’s own stored credentials used during authentication when external servers are not configured or unavailable. This means the device itself verifies user identities against its internal user accounts. Authorization policies then define the permitted actions based on the authenticated identity, and accounting logs are generated locally or sent to external servers for monitoring. A frequent exam trap is confusing the roles of AAA components or misattributing the local database’s function. For example, assuming the local database is involved in authorization or accounting rather than authentication leads to incorrect answers. Practically, understanding that authentication is the first step and that the local database is a credential source clarifies the AAA process. This knowledge is critical for configuring secure access on Cisco routers and switches, ensuring proper user verification, permission control, and activity logging.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask