SY0-701 General Security Concepts Practice Question
After a user signs in, a file server checks whether they can edit a shared folder. Which AAA concept is being applied?
⚠ Common exam trap
Many exam-takers confuse authentication with authorization: candidates often pick 'Authentication' because they think 'signing in' is the entire security process, but the question explicitly states the check happens after sign-in and is about editing rights, which is authorization.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Authorization
The file server is checking whether the authenticated user has the specific permission to edit the shared folder. This is the definition of authorization: determining what an authenticated user is allowed to do. Authentication (A) only verifies identity, not rights; accounting (C) tracks usage; encryption (D) protects data in transit or at rest.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Authentication
Why it's wrong here
Authentication is the process of proving an identity claim using credentials such as a password, smartcard, or biometric. In this scenario, the user has already signed in, so authentication has succeeded; the server is now evaluating permissions. Knowing who a user is does not dictate what files or folders they may edit—two authenticated users can have completely different access rights. Therefore, this step is not part of the authorization decision.
- ✓
Authorization
Why this is correct
Authorization determines what actions an authenticated user is allowed to perform. In this case, the server is checking whether the user has permission to edit the shared folder, not whether they are who they claim to be. This is a common access-control decision made after successful login.
- ✗
Accounting
Why it's wrong here
Accounting, also called auditing, is an AAA function that records user activity for tracking, billing, or compliance, such as logging which files were opened or modified. In this case, the edit-permission check happens before any action is taken, so it cannot be accounting—accounting would only document the outcome after the server makes and enforces its access decision. It may capture evidence of a denied edit attempt, but it never grants or rescinds the ability to edit.
- ✗
Encryption
Why it's wrong here
Encryption protects data at rest or in transit by converting it into ciphertext so that unauthorized users cannot read it. The file server’s decision about whether a user may edit a folder is a discretionary or mandatory access control, unrelated to how the data is encoded. Even with strong encryption enabled, the server must still independently check the user’s permissions; otherwise, encrypted data would be useless to any user granted access. Thus, encryption is a data-protection control, not an AAA mechanism.
Quick reference
AAA Protocol Comparison
| Protocol | Port(s) | Encryption | Transport | Primary Use |
|---|---|---|---|---|
| RADIUS | 1812 / 1813 | Password only | UDP | Network access control |
| TACACS+ | 49 | Full packet | TCP | Device administration |
| Diameter | 3868 | Full session | TCP / SCTP | Carrier / mobile networks |
| 802.1X | — | EAP-based | Layer 2 | Port-based access control |
TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.
Go deeper
Related to this question
Learn chapter
Symmetric vs Asymmetric Encryption
Key term
AAA
AAA (Authentication, Authorization, and Accounting) is a security framework that controls who can access a network, what they are allowed to do, and tracks what they did.
Key term
Encryption
Encryption is the process of converting readable data into a secret code to prevent unauthorized access.
About these practice questions
One of 1,013 original SY0-701 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SY0-701
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. After an employee successfully signs in to a file-sharing portal, the portal checks whether the employee can upload files to a specific project folder. Which AAA concept is being used?
easy- A.Authentication, because the user proved their identity with credentials.
- ✓ B.Authorization, because the system is deciding what the signed-in user is allowed to do.
- C.Accounting, because the portal is recording the folder permissions for later review.
- D.Nonrepudiation, because the portal proves the user cannot deny uploading a file.
Why B: After the user successfully signs in (authentication), the portal checks permissions to determine if they can upload files to a specific project folder. This is the definition of authorization: verifying what an authenticated user is allowed to do. The system is enforcing access control based on the user's identity and the folder's permissions.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.