Courseiva
← 200-301
Full test
easymultiple choiceObjective-mapped

What does the second 'A' in AAA stand for?

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

A

Distractor review

Authentication

This is wrong because authentication is the first “A” in AAA.

B

Best answer

Authorization

This is correct because authorization determines what permissions an authenticated user has.

C

Distractor review

Availability

This is wrong because availability belongs to the CIA triad, not AAA.

D

Distractor review

Accounting

This is wrong because accounting is the third “A” in AAA, not the second.

Common exam trap

Common exam trap: answer the scenario, not the keyword

A frequent exam trap is confusing the order and function of the three A's in AAA. Many candidates incorrectly select Authentication or Accounting as the second 'A' because they know these terms but mix their sequence. Authentication is always first, verifying identity, while Accounting is last, tracking user activity. Authorization is the middle step that controls permissions. Misunderstanding this sequence can lead to incorrect answers, especially since all three terms are related to security. Remembering that Authorization answers "What is the user allowed to do?" helps avoid this confusion.

Technical deep dive

How to think about this question

AAA is a fundamental security framework used in Cisco networking to control access to network devices and services. It stands for Authentication, Authorization, and Accounting. Authentication verifies the identity of a user or device, Authorization determines what resources or actions the authenticated user is permitted to access or perform, and Accounting tracks the activities of the user for auditing and compliance purposes. In Cisco environments, the second 'A' in AAA—Authorization—is critical because it enforces policies that define user privileges after successful authentication. For example, a network administrator might authenticate successfully but only be authorized to view configurations without making changes. Cisco IOS uses AAA to apply these controls through methods like TACACS+ or RADIUS, ensuring granular permission management. A common exam trap is confusing the order or role of the three A's. Authorization is often mistaken for Authentication or Accounting. Understanding that Authorization specifically answers "What can the user do?" after identity verification is essential. In practice, Cisco devices use AAA to separate these functions, allowing precise control and logging of user actions, which is vital for network security and compliance.

KKey Concepts to Remember

  • AAA stands for Authentication, Authorization, and Accounting, which together control and monitor network access in Cisco devices.
  • Authentication verifies the identity of a user or device before granting network access.
  • Authorization determines the specific permissions and actions an authenticated user is allowed to perform on the network device.
  • Accounting records user activities and resource usage for auditing and compliance purposes.
  • Cisco IOS uses AAA protocols like TACACS+ and RADIUS to implement these three functions distinctly.
  • Authorization policies can restrict user commands or access levels even after successful authentication.
  • Confusing the order of AAA components often leads to mistakes; Authorization is always the second step after Authentication.
  • Proper separation of AAA functions enhances network security by controlling access and tracking user behavior.

TExam Day Tips

  • Watch for words such as best, first, most likely and least administrative effort.
  • Review why wrong options are wrong, not only why the correct option is correct.

Related practice questions

Related 200-301 practice-question pages

Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.

CCNA subnetting practice questions

Practise IPv4 subnetting, CIDR, masks, host ranges and subnet selection.

CCNA OSPF practice questions

Practise OSPF neighbours, router IDs, metrics, areas and routing-table interpretation.

CCNA VLAN practice questions

Practise VLANs, access ports, trunks, allowed VLANs and switching scenarios.

CCNA STP practice questions

Practise spanning tree, root bridge election, port roles and STP troubleshooting.

CCNA EtherChannel practice questions

Practise LACP, PAgP, port-channel behaviour and bundle requirements.

CCNA ACL practice questions

Practise standard and extended ACLs, permit/deny logic and traffic filtering.

CCNA NAT practice questions

Practise static NAT, dynamic NAT, PAT and inside/outside address translation.

CCNA DHCP practice questions

Practise DHCP scopes, relay, leases and troubleshooting.

CCNA show ip route practice questions

Practise routing-table output, longest-prefix match, AD and route selection.

CCNA show interfaces trunk practice questions

Practise trunk verification and VLAN forwarding across switches.

CCNA wireless security practice questions

Practise WLAN security, authentication and wireless architecture concepts.

CCNA IPv6 practice questions

Practise IPv6 addressing, routes, neighbour discovery and common IPv6 exam traps.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

Question 1

A router learns the same prefix from both OSPF and EIGRP. Which route is installed by default?

Question 2

A router shows this output: R1#show ip ospf neighbor Neighbor ID Pri State Dead Time Address Interface 10.1.1.2 1 FULL/DR 00:00:34 192.168.12.2 GigabitEthernet0/0 10.1.1.3 1 2WAY/DROTHER 00:00:39 192.168.12.3 GigabitEthernet0/0 Which statement is correct?

Question 3

What is the OSPF metric called?

Question 4

A non-root switch has two uplinks toward the root bridge. One path has a lower total STP cost than the other. What role will the lower-cost uplink have?

Question 5

A router interface applies this ACL inbound: 10 deny tcp any any eq 80 20 permit ip any any A user reports that web browsing to a server by IP address fails, but ping works. Which statement best explains the behavior?

Question 6

A router learns route 198.51.100.0/24 from OSPF with AD 110 and also has a static route to the same prefix configured with AD 150. Which route is installed?

FAQ

Questions learners often ask

What does this 200-301 question test?

AAA stands for Authentication, Authorization, and Accounting, which together control and monitor network access in Cisco devices.

What is the correct answer to this question?

The correct answer is: Authorization — AAA stands for Authentication, Authorization, and Accounting. The second “A” is Authorization. In plain language, authentication answers the question “Who are you?” Authorization answers “What are you allowed to do?” and accounting answers “What did you do?” Those three ideas work together to control and track access to devices and services. This question is simple, but it matters because many security designs depend on keeping those functions separate in your mind.

What should I do if I get this 200-301 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.

Discussion

Loading comments…

Sign in to join the discussion.