Which statement best describes why authorization is different from authentication in AAA?

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

Technical deep dive

How to think about this question

Authentication and authorization are two distinct but complementary functions within the AAA (Authentication, Authorization, and Accounting) framework used in Cisco networking. Authentication is the initial step that verifies the identity of a user or device attempting to access the network, typically through credentials like usernames and passwords. Authorization follows authentication and determines what resources or commands the authenticated user is permitted to access or execute, enforcing access control policies. In Cisco devices, after a user is authenticated, the authorization process evaluates the user's privileges and restrictions based on predefined policies or roles. This separation allows for granular control, where a valid user might have limited permissions depending on their role or the context of access. For example, a network technician might be authorized to execute configuration commands, while a guest user might only have read-only access. A common exam trap is confusing authentication with authorization, assuming that verifying identity automatically grants full access. In practice, authentication only confirms who the user is, while authorization explicitly defines what the user can do. Cisco IOS and other Cisco platforms implement this distinction to enhance security by preventing unauthorized actions even from authenticated users, which is critical in secure administrative and operational environments.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask