The RADIUS protocol supports authentication, authorization and accounting functions. Which of the following messages does the RADIUS server issue authorization through?

Question

Options

• AAccess-Request
• BAccess-Accept
• CAccounting-Response
• DAccounting-Request

• A
  3% (1)
• B
  83% (25)
• C
  3% (1)
• D
  10% (3)

Explanation

RADIUS issues authorization through the Access-Accept message (B) - when a client sends an Access-Request, the server validates credentials and, if approved, responds with Access-Accept, which carries authorization attributes (like VLAN assignment, session timeout, or access level) that tell the network device what the user is permitted to do.

Why the distractors are wrong:

• A (Access-Request) is sent by the client (NAS), not the server - it carries credentials for the server to evaluate, not authorization grants.
• C (Accounting-Response) is the server's acknowledgment of an accounting record - it confirms receipt, not authorization.
• D (Accounting-Request) is sent by the client to log session data (start/stop/interim) for billing or auditing - it has nothing to do with granting access.

Memory tip: Think of it as a conversation - the client requests access, the server accepts (and grants authorization) or rejects. Accounting messages are separate from authentication/authorization and deal with tracking usage, not permissions.

No community discussion yet for this question.