200-150 · Question #133
Which description of the AAA accounting feature is true?
The correct answer is B. It maintains a log of every management session used to access a switch.. In the AAA framework, 'Accounting' is the component responsible for recording and logging user activity, session details, and resource usage.
Question
Which description of the AAA accounting feature is true?
Options
- AIt regulates which options a user can access on a switch.
- BIt maintains a log of every management session used to access a switch.
- CIt verifies the identity of a user who is accessing a switch.
- DIt assembles a set of attributes that describe what a user is authorized to perform.
How the community answered
(17 responses)- B94% (16)
- D6% (1)
Why each option
In the AAA framework, 'Accounting' is the component responsible for recording and logging user activity, session details, and resource usage.
Regulating which options or commands a user can access is the role of AAA Authorization, not Accounting.
AAA Accounting tracks and logs all actions taken during a management session - including commands entered, session start/stop times, and connection details - providing an audit trail of who accessed the device and what they did.
Verifying the identity of a user by validating credentials is the role of AAA Authentication, not Accounting.
Assembling a set of attributes that define what a user is permitted to do describes AAA Authorization, which uses attribute-value pairs from a RADIUS or TACACS+ server to enforce access rights.
Concept tested: AAA accounting function in network device access control
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/xe-16/sec-usr-aaa-xe-16-book/sec-cfg-authen.html
Topics
Community Discussion
No community discussion yet for this question.