This 200-301 practice question tests your understanding of network services and security. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. A key principle to apply: aAA stands for Authentication, Authorization, and Accounting, which together control and monitor network access in Cisco devices.. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
What does the second 'A' in AAA stand for?
Authentication
Why wrong: This is wrong because authentication is the first “A” in AAA.
Authorization
This is correct because authorization determines what permissions an authenticated user has.
Availability
Why wrong: This is wrong because availability belongs to the CIA triad, not AAA.
Accounting
Why wrong: This is wrong because accounting is the third “A” in AAA, not the second.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Authorization
AAA stands for Authentication, Authorization, and Accounting. The second “A” is Authorization. In plain language, authentication answers the question “Who are you?” Authorization answers “What are you allowed to do?” and accounting answers “What did you do?” Those three ideas work together to control and track access to devices and services. This question is simple, but it matters because many security designs depend on keeping those functions separate in your mind.
Key principle: AAA stands for Authentication, Authorization, and Accounting, which together control and monitor network access in Cisco devices.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Authentication
Why it's wrong here
This is wrong because authentication is the first “A” in AAA.
When this WOULD be correct
In a question asking about the components of AAA where the focus is solely on the identity verification process, such as 'What is the first step in the AAA framework?', the correct answer would be 'Authentication'.
Authorization
Why this is correct
This is correct because authorization determines what permissions an authenticated user has.
Related concept
AAA stands for Authentication, Authorization, and Accounting, which together control and monitor network access in Cisco devices.
Availability
Why it's wrong here
This is wrong because availability belongs to the CIA triad, not AAA.
When this WOULD be correct
In a different question asking about the principles of information security, such as 'What are the three pillars of information security?', 'C: Availability' would be correct as it is one of the key principles alongside Confidentiality and Integrity.
Accounting
Why it's wrong here
This is wrong because accounting is the third “A” in AAA, not the second.
When this WOULD be correct
If the question were to ask about the components of AAA in the context of network security logging and monitoring, where the focus is on tracking user actions and resource usage, 'Accounting' would be the correct answer.
Option-by-option analysis
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
Why this is correct
This is correct because authorization determines what permissions an authenticated user has.
Why this is wrong here
The option 'A: Authentication' is wrong because it refers to the first 'A' in the AAA framework, which stands for verifying the identity of a user or system, not the second 'A' which is 'Authorization'.
★ When this WOULD be the correct answer
In a question asking about the components of AAA where the focus is solely on the identity verification process, such as 'What is the first step in the AAA framework?', the correct answer would be 'Authentication'.
Why candidates choose this
Candidates may find this option tempting because they are familiar with the concept of authentication as a critical security process, leading them to mistakenly associate it with the AAA framework without distinguishing between the specific roles of each component.
Why this is wrong here
The option 'C: Availability' is incorrect because it does not represent any of the components of the AAA framework, which specifically includes Authentication, Authorization, and Accounting. Availability pertains to system uptime and access, not user permissions or identity verification.
★ When this WOULD be the correct answer
In a different question asking about the principles of information security, such as 'What are the three pillars of information security?', 'C: Availability' would be correct as it is one of the key principles alongside Confidentiality and Integrity.
Why candidates choose this
Candidates may choose 'C: Availability' due to its common association with security practices, leading them to mistakenly believe it is part of the AAA framework, especially if they are more familiar with the concept of availability in the context of overall system security.
Why this is wrong here
The option 'D: Accounting' is incorrect because the second 'A' in AAA specifically refers to 'Authorization,' not to 'Accounting,' which is the third component of the AAA framework.
★ When this WOULD be the correct answer
If the question were to ask about the components of AAA in the context of network security logging and monitoring, where the focus is on tracking user actions and resource usage, 'Accounting' would be the correct answer.
Why candidates choose this
Candidates may find 'Accounting' tempting because it is often associated with user activity tracking and logging, which is a critical aspect of security management, leading to confusion with the AAA framework's components.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Common exam traps
A frequent exam trap is confusing the order and function of the three A's in AAA. Many candidates incorrectly select Authentication or Accounting as the second 'A' because they know these terms but mix their sequence. Authentication is always first, verifying identity, while Accounting is last, tracking user activity. Authorization is the middle step that controls permissions. Misunderstanding this sequence can lead to incorrect answers, especially since all three terms are related to security. Remembering that Authorization answers "What is the user allowed to do?" helps avoid this confusion.
Detailed technical explanation
AAA is a fundamental security framework used in Cisco networking to control access to network devices and services. It stands for Authentication, Authorization, and Accounting. Authentication verifies the identity of a user or device, Authorization determines what resources or actions the authenticated user is permitted to access or perform, and Accounting tracks the activities of the user for auditing and compliance purposes. In Cisco environments, the second 'A' in AAA—Authorization—is critical because it enforces policies that define user privileges after successful authentication. For example, a network administrator might authenticate successfully but only be authorized to view configurations without making changes. Cisco IOS uses AAA to apply these controls through methods like TACACS+ or RADIUS, ensuring granular permission management. A common exam trap is confusing the order or role of the three A's. Authorization is often mistaken for Authentication or Accounting. Understanding that Authorization specifically answers "What can the user do?" after identity verification is essential. In practice, Cisco devices use AAA to separate these functions, allowing precise control and logging of user actions, which is vital for network security and compliance.
Key takeaway
AAA stands for Authentication, Authorization, and Accounting, which together control and monitor network access in Cisco devices.
Real-world example
A junior network technician can log in to a core router but cannot reach the enable prompt or configuration mode. The AAA server is authenticating the login — but the authorisation policy only grants privilege level 1, not 15. Authentication (who you are) is working; authorisation (what you can do) is not.
What to study next
Review aAA stands for Authentication, Authorization, and Accounting, which together control and monitor network access in Cisco devices., then practise related 200-301 questions on the same topic to reinforce the concept.
Network Services and Security — study guide chapter
Learn the concepts, then practise the questions
Network Services and Security practice questions
Targeted practice on this topic area only
All 200-301 questions
1,819 questions across all exam domains
CCNA 200-301 v2 study guide
Full concept coverage aligned to exam objectives
200-301 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Practise 200-301 questions linked to Network Infrastructure and Connectivity.
Practise 200-301 questions linked to Switching and Network Access.
Practise 200-301 questions linked to IP Routing.
Practise 200-301 questions linked to Network Services and Security.
Practise 200-301 questions linked to AI and Network Operations.
Practise IPv4 subnetting, CIDR, masks, host ranges and subnet selection.
Practise OSPF neighbours, router IDs, metrics, areas and routing-table interpretation.
Practise VLANs, access ports, trunks, allowed VLANs and switching scenarios.
Practise spanning tree, root bridge election, port roles and STP troubleshooting.
Practise LACP, PAgP, port-channel behaviour and bundle requirements.
Practise standard and extended ACLs, permit/deny logic and traffic filtering.
Practise static NAT, dynamic NAT, PAT and inside/outside address translation.
Practice this exam
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Network Services and Security — This question tests Network Services and Security — AAA stands for Authentication, Authorization, and Accounting, which together control and monitor network access in Cisco devices..
The correct answer is: Authorization — AAA stands for Authentication, Authorization, and Accounting. The second “A” is Authorization. In plain language, authentication answers the question “Who are you?” Authorization answers “What are you allowed to do?” and accounting answers “What did you do?” Those three ideas work together to control and track access to devices and services. This question is simple, but it matters because many security designs depend on keeping those functions separate in your mind.
Review aAA stands for Authentication, Authorization, and Accounting, which together control and monitor network access in Cisco devices., then practise related 200-301 questions on the same topic to reinforce the concept.
AAA stands for Authentication, Authorization, and Accounting, which together control and monitor network access in Cisco devices.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Keep practising
Last reviewed: Apr 12, 2026
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.