When configuring access authentication, you need to define various contents authorized to the user in the authorization result. Which of the following does not include?

Question

Options

• ASecurity group
• BIP address
• CVLAN
• DACL

• A
  13% (5)
• B
  78% (31)
• C
  3% (1)
• D
  8% (3)

Explanation

IP address (B) is the correct answer because IP addresses are not part of the authorization result in access authentication systems. IP assignment is handled separately by DHCP, not by the authentication/authorization server (e.g., RADIUS). Authorization results define access policies, not network addressing.

Why the distractors are wrong:

• A (Security group): Security groups can absolutely be returned by the authorization server to classify users and apply group-based policies.
• C (VLAN): VLAN assignment is a classic authorization parameter - for example, RADIUS commonly returns a VLAN ID to place the authenticated user into the appropriate network segment.
• D (ACL): ACLs (Access Control Lists) are frequently pushed down as part of the authorization result to control what traffic the user is permitted to send or receive.

Memory tip: Think of authorization as defining "what rules apply to you" (group, VLAN, ACL) versus "where you sit on the network" (IP address). Since IP addressing is a DHCP responsibility - not an authorization policy - it doesn't belong in the authorization result.

No community discussion yet for this question.