SY0-701 General Security Concepts Practice Question
Which two actions are examples of accounting in AAA? Select two.
⚠ Common exam trap
CompTIA often tests the distinction between authentication (verifying identity), authorization (granting permissions), and accounting (logging actions), so the trap here is confusing authorization actions (like granting folder access) or authentication methods (like multifactor) with accounting, which only records events after they occur.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Recording successful logons in a security log
Accounting in AAA involves recording user activities, such as successful logons, in a security log. This provides an audit trail for monitoring and compliance. Option C is correct because tracking which files a user opened during a session is a form of accounting that logs resource access for accountability and usage analysis.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Recording successful logons in a security log
Why this is correct
Recording successful logons in a security log is accounting because it creates an audit trail that documents who accessed the system, when, and from where. This log serves as a verifiable record for post-event reviews, compliance audits, and incident investigations, directly aligning with the accounting pillar of AAA, which is responsible for tracking user activity and resource usage.
- ✗
Checking a username and password before access
Why it's wrong here
Checking a username and password before access is authentication, not accounting, because it is the process of validating the user's claimed identity against known credentials. In the AAA framework, authentication always occurs first, before any authorization or accounting takes place, and it does not produce a historical log entry solely by itself.
- ✓
Tracking which files a user opened during a session
Why this is correct
Tracking which files a user opened during a session is accounting because it captures detailed user activity at the resource level after the user has already been authenticated and authorized. This type of logging provides the granular behavioral data needed for auditing usage patterns, detecting potential policy violations, and supporting forensic analysis, which are core accounting functions.
- ✗
Granting access to the finance folder
Why it's wrong here
Granting access to the finance folder is authorization because it is the process of deciding whether an authenticated user has the right to perform an action or access a specific resource. Authorization actively applies permissions and access control rules, whereas accounting passively records what was accessed, so it cannot be classified as accounting.
- ✗
Requiring a fingerprint and a password
Why it's wrong here
Requiring a fingerprint and a password is authentication because it combines two distinct factors — something you are (biometric) and something you know (password) — to prove the user's identity. This is a multifactor authentication mechanism, and it occurs before any accounting records are generated; the act of verifying identity is separate from the act of recording that verification.
Quick reference
AAA Protocol Comparison
| Protocol | Port(s) | Encryption | Transport | Primary Use |
|---|---|---|---|---|
| RADIUS | 1812 / 1813 | Password only | UDP | Network access control |
| TACACS+ | 49 | Full packet | TCP | Device administration |
| Diameter | 3868 | Full session | TCP / SCTP | Carrier / mobile networks |
| 802.1X | — | EAP-based | Layer 2 | Port-based access control |
TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.
Go deeper
Related to this question
Learn chapter
Security Controls
Key term
AAA
AAA (Authentication, Authorization, and Accounting) is a security framework that controls who can access a network, what they are allowed to do, and tracks what they did.
Key term
Accounting
Accounting in IT identity and access management is the process of tracking and logging what authenticated users do on a system or network.
About these practice questions
Courseiva writes every SY0-701 question from scratch — 1,013 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SY0-701
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which action is the best example of accounting in AAA?
easy- A.The system checks a password and a one-time code before allowing access.
- ✓ B.The system records the username, timestamp, and files opened during the session.
- C.The system grants access to the finance folder after the user is approved.
- D.The system forces the user to change their password after 90 days.
Why B: Accounting in AAA (Authentication, Authorization, and Accounting) focuses on tracking user activities and resource usage. Option B correctly describes this by specifying the recording of username, timestamp, and files accessed, which are typical audit log entries used for monitoring and compliance.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.