Match each access-control term to its most accurate meaning.
Drag a concept onto its matching description — or click a concept then click the description.
Verification of identity
Determination of allowed actions
Limiting access to only what is necessary
Credential store maintained on the device itself
⚠ Common exam trap
The exam often tests the distinction between authentication (verifying identity) and authorization (granting permissions). Many candidates mix these up. Also, remember that accounting is about logging, not access decisions.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Authentication: The process of verifying the identity of a user or device.
AAA is a framework for controlling access. Authentication verifies identity, authorization grants permissions, and accounting logs activities. Identification is the initial claim, and auditing is the review of logs.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Authentication: The process of verifying the identity of a user or device.
Why this is correct
Authentication is the initial security step that validates a user's or device's stated identity through provided credentials such as passwords, cryptographic keys, or biometric factors. Unlike identification, which merely asserts who the user is, authentication verifies the claim to establish trust before access decisions can be made. This is the first A in the AAA framework (Authentication, Authorization, Accounting) and is required before authorization or accounting can occur.
Authorization: The process of verifying the identity of a user or device.
Why it's wrong here
Authorization is the post-authentication process that determines exactly which network resources, services, or commands an authenticated user may use, often based on assigned privilege levels or policies. It is not concerned with verifying identity; rather, it assumes the user has already been authenticated and then answers the question 'what is this user allowed to do?' Therefore, it is distinct from authentication, which is the verification step.
When this WOULD be correct
If the question were 'Match each access-control term to its most accurate meaning' and the option was paired with a definition like 'The process of determining what resources a user can access', then Authorization would be correct. Alternatively, if the question asked for the term that means 'verifying identity', then this option would be correct if labeled as Authentication.
Accounting: The process of granting or denying access to network resources.
Why it's wrong here
Accounting cannot be the process of granting or denying access because that action is the definition of authorization. In practice, accounting refers to the collection and logging of user activity data, including login and logout times, commands executed, and bandwidth consumed. This information is used for auditing, billing, compliance, and troubleshooting, and it in no way controls resource access decisions.
When this WOULD be correct
In a question asking 'Which AAA component tracks user actions and resource usage?', Accounting would be correct as it involves logging and auditing.
Identification: The process of logging and monitoring user activities.
Why it's wrong here
Identification is the user's initial assertion of identity, such as typing a username or presenting a pre-shared token, before any verification occurs. Logging and monitoring user activities is called accounting, which comes after authentication and authorization and tracks what the user actually did. Representing accounting as identical to identification conflates the pre-verification claim with the post-session audit trail.
When this WOULD be correct
In a question asking 'Which term describes the process of a user claiming an identity, such as providing a username?', Identification would be the correct answer.
Option-by-option analysis
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
Why this is correct
Authentication is the initial security step that validates a user's or device's stated identity through provided credentials such as passwords, cryptographic keys, or biometric factors. Unlike identification, which merely asserts who the user is, authentication verifies the claim to establish trust before access decisions can be made. This is the first A in the AAA framework (Authentication, Authorization, Accounting) and is required before authorization or accounting can occur.
Why this is wrong here
Authorization is the process of granting or denying access to network resources, not verifying identity. The question asks for the meaning of 'Authorization', but the option incorrectly defines it as verifying identity, which is the definition of Authentication.
★ When this WOULD be the correct answer
If the question were 'Match each access-control term to its most accurate meaning' and the option was paired with a definition like 'The process of determining what resources a user can access', then Authorization would be correct. Alternatively, if the question asked for the term that means 'verifying identity', then this option would be correct if labeled as Authentication.
Why candidates choose this
Candidates often confuse Authentication and Authorization because both terms are related to access control and start with 'A'. They may memorize definitions without distinguishing the subtle difference between verifying identity (Authentication) and granting permissions (Authorization).
Why this is wrong here
Accounting is the process of logging and monitoring user activities, not granting or denying access. The description given matches authorization, not accounting.
★ When this WOULD be the correct answer
In a question asking 'Which AAA component tracks user actions and resource usage?', Accounting would be correct as it involves logging and auditing.
Why candidates choose this
Candidates often confuse the terms 'accounting' and 'authorization' because both are part of AAA and involve access control, leading to misassignment of their definitions.
Why this is wrong here
Identification is the process of claiming an identity (e.g., providing a username), not logging and monitoring user activities. Accounting is the correct term for logging and monitoring user activities.
★ When this WOULD be the correct answer
In a question asking 'Which term describes the process of a user claiming an identity, such as providing a username?', Identification would be the correct answer.
Why candidates choose this
Candidates may confuse identification with accounting because both involve user-related actions, but identification is about stating who you are, while accounting tracks what you did.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Quick reference
| Protocol | Port(s) | Encryption | Transport | Primary Use |
|---|---|---|---|---|
| RADIUS | 1812 / 1813 | Password only | UDP | Network access control |
| TACACS+ | 49 | Full packet | TCP | Device administration |
| Diameter | 3868 | Full session | TCP / SCTP | Carrier / mobile networks |
| 802.1X | — | EAP-based | Layer 2 | Port-based access control |
TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.
Go deeper
About these practice questions
Courseiva writes every 200-301 question from scratch — 1,389 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.