nerdexam
(ISC)2

CISSP-ISSAP · Question #45

What are the benefits of using AAA security service in a network? Each correct answer represents a part of the solution. Choose all that apply.

The correct answer is A. It provides scalability. C. It increases flexibility and control of access configuration. D. It supports RADIUS, TACACS+, and Kerberos authentication methods. AAA (Authentication, Authorization, and Accounting) is a security framework that centralizes access control, making it scalable (A) because administrators manage policies from one place rather than configuring each device individually. It offers flexibility and control (C)…

Identity and Access Management (IAM) Architecture

Question

What are the benefits of using AAA security service in a network? Each correct answer represents a part of the solution. Choose all that apply.

Options

  • AIt provides scalability.
  • BIt supports a single backup system.
  • CIt increases flexibility and control of access configuration.
  • DIt supports RADIUS, TACACS+, and Kerberos authentication methods.

How the community answered

(37 responses)
  • A
    78% (29)
  • B
    22% (8)

Explanation

AAA (Authentication, Authorization, and Accounting) is a security framework that centralizes access control, making it scalable (A) because administrators manage policies from one place rather than configuring each device individually. It offers flexibility and control (C) through granular permissions - defining not just who can access a resource, but what they can do with it. It also supports multiple authentication protocols (D) like RADIUS, TACACS+, and Kerberos, giving organizations the freedom to choose based on their environment.

Option B is wrong because AAA is specifically designed to support multiple redundant authentication servers, not a single backup - single-point reliance would be a weakness, not a benefit.

Memory tip: Think of AAA as a "triple-A rated" security bouncer: it scales to any crowd size, flexibly controls who gets into which room, and speaks multiple languages (RADIUS, TACACS+, Kerberos) - but it always has backup bouncers on standby, never just one.

Topics

#AAA#RADIUS#TACACS+#Kerberos

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSAP Practice