CCNA Network Services and Security Practice Question
This 200-301 practice question tests your understanding of network services and security. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. A key principle to apply: accounting in AAA records detailed user activity and resource usage after successful authentication and authorization.. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Which statement best describes the purpose of accounting in AAA?
Clue words in this question
Noticing these words before you look at the options changes how you read each choice.
Clue: "best"
Why it matters: Signals that multiple options may be partially correct. Choose the option that most directly solves the exact problem described, not the one that sounds most complete.
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It records activity or usage details related to access
Accounting in AAA is about recording what happened during access or use of the system. In plain language, once a user logs in and begins working, accounting can keep track of actions, sessions, commands, or usage details so administrators have a record for review and auditing. This is especially useful for troubleshooting, compliance, and understanding who did what.
Accounting is not the same as authentication, which verifies identity, or authorization, which decides permissions. It is the record-keeping part of the AAA model.
Key principle: Accounting in AAA records detailed user activity and resource usage after successful authentication and authorization.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✓
It records activity or usage details related to access
Why this is correct
This is correct because accounting in AAA is the record-keeping and audit-oriented component.
Clue confirmation
The clue word "best" in the question point toward this answer.
Related concept
Accounting in AAA records detailed user activity and resource usage after successful authentication and authorization.
✗
It decides whether a user knows the correct password
Why it's wrong here
This is wrong because that is part of authentication, not accounting.
When this WOULD be correct
In a different exam scenario where the question asks about the primary function of a security mechanism that verifies user credentials, such as a password authentication system, option B would be correct. For example, a question could ask, 'What is the primary function of a password authentication system?'
✗
It defines the spanning-tree topology
Why it's wrong here
This is wrong because AAA accounting is unrelated to STP topology decisions.
When this WOULD be correct
If the question were about network management protocols, asking which statement describes a function of spanning-tree protocol in preventing loops in a network, option C would be correct.
✗
It assigns IP addresses dynamically to clients
Why it's wrong here
This is wrong because DHCP handles dynamic IP assignment.
When this WOULD be correct
In a question asking about network services that manage client configurations, such as 'Which service is responsible for dynamically assigning IP addresses to clients in a network?', option D would be correct as it directly relates to DHCP functionality.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓It records activity or usage details related to accessCorrect answer▾
Why this is correct
This is correct because accounting in AAA is the record-keeping and audit-oriented component.
✗It decides whether a user knows the correct passwordWrong answer — click to see why▾
Why this is wrong here
This option is wrong because accounting in AAA (Authentication, Authorization, and Accounting) focuses on tracking user activity rather than verifying password correctness. The purpose of accounting is to log and monitor user actions after authentication and authorization have occurred.
★ When this WOULD be the correct answer
In a different exam scenario where the question asks about the primary function of a security mechanism that verifies user credentials, such as a password authentication system, option B would be correct. For example, a question could ask, 'What is the primary function of a password authentication system?'
Why candidates choose this
Candidates may choose this option due to a misunderstanding of the AAA framework, conflating the authentication process with accounting. The mention of 'user' and 'password' may trigger familiarity, leading to an incorrect assumption about the role of accounting.
✗It defines the spanning-tree topologyWrong answer — click to see why▾
Why this is wrong here
This option is wrong because spanning-tree topology is related to network design and redundancy rather than accounting, which focuses on tracking access and usage details.
★ When this WOULD be the correct answer
If the question were about network management protocols, asking which statement describes a function of spanning-tree protocol in preventing loops in a network, option C would be correct.
Why candidates choose this
Candidates may choose this option due to confusion between network management concepts and accounting functions, leading them to mistakenly associate spanning-tree topology with overall network operations.
✗It assigns IP addresses dynamically to clientsWrong answer — click to see why▾
Why this is wrong here
Option D is incorrect because accounting in AAA (Authentication, Authorization, and Accounting) focuses on tracking user activity rather than dynamically assigning IP addresses. IP address assignment is typically managed by DHCP, not accounting functions.
★ When this WOULD be the correct answer
In a question asking about network services that manage client configurations, such as 'Which service is responsible for dynamically assigning IP addresses to clients in a network?', option D would be correct as it directly relates to DHCP functionality.
Why candidates choose this
Candidates may find option D tempting because they associate accounting with network management tasks, and the concept of dynamic IP address assignment is a common topic in networking, leading to confusion about the specific role of accounting.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Common exam traps
Common exam trap: answer the scenario, not the keyword
A frequent exam trap is mistaking accounting for authentication or authorization. Candidates often confuse accounting with authentication because both involve user access processes. However, authentication only verifies identity, and authorization decides permissions. Accounting is solely about recording what the user does after access is granted. Misreading the question to think accounting controls access or verifies credentials leads to incorrect answers. Remember, accounting is the audit and logging component, not the gatekeeper or permission enforcer.
Detailed technical explanation
How to think about this question
Accounting in the AAA (Authentication, Authorization, and Accounting) framework is the process of tracking and recording user activities and resource usage on a network device. It captures detailed logs about what users do after they have been authenticated and authorized, including session start and stop times, commands executed, and data transferred. This information is critical for auditing, compliance, and troubleshooting network security and performance issues.
The decision process in AAA separates three distinct functions: authentication verifies user identity, authorization determines what resources or commands the user can access, and accounting records the actual usage and activities performed. Accounting does not influence access control decisions but provides a comprehensive audit trail that network administrators can analyze to detect misuse, policy violations, or security breaches.
A common exam trap is confusing accounting with authentication or authorization. While authentication checks credentials and authorization sets permissions, accounting strictly logs activity details. Practically, Cisco devices use protocols like RADIUS or TACACS+ to implement AAA accounting, enabling centralized logging and reporting. Understanding this separation helps in designing secure networks and passing the CCNA exam questions accurately.
KKey Concepts to Remember
Accounting in AAA records detailed user activity and resource usage after successful authentication and authorization.
Authentication in AAA verifies user identity by validating credentials such as passwords or certificates.
Authorization in AAA determines the permissions and access levels granted to an authenticated user.
Accounting provides audit trails that help network administrators monitor user actions for security and compliance.
Cisco devices commonly use RADIUS or TACACS+ protocols to implement AAA accounting functions.
Accounting logs include session start and stop times, commands executed, and data usage statistics.
Accounting does not control access but supports troubleshooting and forensic analysis by maintaining usage records.
Confusing accounting with authentication or authorization is a frequent mistake in CCNA exam scenarios.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Accounting in AAA records detailed user activity and resource usage after successful authentication and authorization.
Real-world example
How this comes up in practice
A junior network technician can log in to a core router but cannot reach the enable prompt or configuration mode. The AAA server is authenticating the login — but the authorisation policy only grants privilege level 1, not 15. Authentication (who you are) is working; authorisation (what you can do) is not.
Related glossary terms
Concepts from this question explained
These glossary pages explain the core terms tested in this 200-301 question in full detail.
Review accounting in AAA records detailed user activity and resource usage after successful authentication and authorization., then practise related 200-301 questions on the same topic to reinforce the concept.
Network Services and Security — This question tests Network Services and Security — Accounting in AAA records detailed user activity and resource usage after successful authentication and authorization..
What is the correct answer to this question?
The correct answer is: It records activity or usage details related to access — Accounting in AAA is about recording what happened during access or use of the system. In plain language, once a user logs in and begins working, accounting can keep track of actions, sessions, commands, or usage details so administrators have a record for review and auditing. This is especially useful for troubleshooting, compliance, and understanding who did what.
Accounting is not the same as authentication, which verifies identity, or authorization, which decides permissions. It is the record-keeping part of the AAA model.
What should I do if I get this 200-301 question wrong?
Review accounting in AAA records detailed user activity and resource usage after successful authentication and authorization., then practise related 200-301 questions on the same topic to reinforce the concept.
Are there clue words in this question I should notice?
Yes — watch for: "best". Signals that multiple options may be partially correct. Choose the option that most directly solves the exact problem described, not the one that sounds most complete.
What is the key concept behind this question?
Accounting in AAA records detailed user activity and resource usage after successful authentication and authorization.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.