What statement describes the authorization component of a AAA implementation?

Question

Options

• AVerifying that a user is who he says he is.
• BImplementing a WIPS as a full-time monitoring solution to enforce policies.
• CGranting access to specific network services or resources according to a user profile.
• DValidating client device credentials against a database.

• A
  5% (1)
• C
  91% (20)
• D
  5% (1)

Explanation

Granting access to specific network services or resources according to a user profile describes the authorization component of a AAA implementation. AAA stands for Authentication, Authorization, and Accounting, which are three functions that are used to control and monitor access to network resources and services. Authentication is the process of verifying that a user is who he says he is, by using credentials such as username, password, certificate, token, or biometric data. Authorization is the process of granting access to specific network services or resources according to a user profile, which defines the user's role, privileges, and permissions. Accounting is the process of recording and reporting the usage of network services or resources by a user, such as the duration, volume, type, and location of the access. AAA can be implemented by using different protocols and servers, such as RADIUS, TACACS+, LDAP, Kerberos, or Active Directory.

No community discussion yet for this question.