Match each security concept to its description.

Technical deep dive

How to think about this question

Authentication, Authorization, and Accounting (AAA) form a fundamental security framework in Cisco networking, especially relevant in the CCNA 200-301 Security Fundamentals domain. Authentication is the process that verifies the identity of a user or device attempting to access the network, ensuring that only legitimate entities gain entry. Authorization follows authentication by determining what resources or actions the authenticated user is permitted to access or perform. Accounting then tracks and logs the activities of the user, providing an audit trail for security and compliance purposes. In Cisco devices, AAA services are configured to enforce these three security functions in sequence. When a user attempts to connect, the device first authenticates the user credentials, then authorizes access based on predefined policies or roles, and finally records session details such as commands executed or data transferred. This layered approach enhances network security by tightly controlling access and maintaining accountability. Understanding the distinct roles of each AAA component is critical for correctly implementing and troubleshooting Cisco security configurations. A common exam trap is confusing the order and purpose of AAA components, such as mixing up authorization with authentication or assuming accounting controls access. In practical Cisco environments, misconfiguring AAA can lead to unauthorized access or lack of proper logging, which compromises security and auditing. Recognizing that authentication answers "who you are," authorization answers "what you can do," and accounting answers "what you did" helps avoid these mistakes and ensures correct AAA deployment in CCNA scenarios.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask