Match each security control or idea to its most accurate purpose.

Technical deep dive

How to think about this question

Security controls in Cisco networking environments serve distinct but complementary purposes to protect network resources and data. Secure Shell (SSH) is a protocol that encrypts remote management sessions, preventing eavesdropping and man-in-the-middle attacks on administrative access to devices. AAA (Authentication, Authorization, and Accounting) is a framework that governs user identity verification, permission enforcement, and activity logging, ensuring only authorized users perform allowed actions and their activities are recorded. The principle of least privilege restricts user and process access rights to the minimum necessary, reducing the attack surface and limiting potential damage from compromised accounts. Syslog is a centralized logging protocol that collects and stores device event messages, providing visibility into network activity and aiding in troubleshooting and security auditing. The decision process for applying these controls involves understanding their unique roles. SSH secures the communication channel for remote device management but does not authenticate users beyond the initial login. AAA provides a comprehensive mechanism to authenticate users, authorize their commands, and account for their actions, often integrating with external servers like RADIUS or TACACS+. Least privilege is a security best practice applied through access control lists (ACLs), role-based access control (RBAC), or device configuration to limit unnecessary access. Syslog does not prevent security incidents but supports detection and response by aggregating logs from multiple devices into a centralized system for analysis. A frequent exam trap is assuming these controls are interchangeable or that one control can replace another. For example, SSH does not replace AAA because it lacks granular authorization and accounting capabilities. Similarly, syslog is not a preventive control but a monitoring tool. In practical Cisco network environments, these controls work together: SSH protects management sessions, AAA enforces user policies, least privilege limits access scope, and syslog provides audit trails. Understanding their distinct purposes and how they complement each other is critical for correctly answering CCNA security questions.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask