HPE6-A85 · Question #55
Drag and Drop Question Match each AAA service with its correct definition (Matches may be used more than once or not at all). Answer:
The correct answer is Authorization; Authentication; Accounting; Authentication. AAA Services: Drag-and-Drop Explanation The Three AAA Concepts | Service | Core Function | Key Question It Answers | |---|---|---| | Authentication | Verifies who you are | "Is this person who they claim to be?" | | Authorization | Determines what you can do | "What is this perso
Question
Drag and Drop Question Match each AAA service with its correct definition (Matches may be used more than once or not at all). Answer:
Exhibit
Answer Area
Drag items
Correct arrangement
- Authorization
- Authentication
- Accounting
- Authentication
Explanation
AAA Services: Drag-and-Drop Explanation
The Three AAA Concepts
| Service | Core Function | Key Question It Answers |
|---|---|---|
| Authentication | Verifies who you are | "Is this person who they claim to be?" |
| Authorization | Determines what you can do | "What is this person allowed to access?" |
| Accounting | Records what you did | "What did this person do and when?" |
Why Each Position Has That Answer
Position 1 → Authorization Controls access to resources after identity is confirmed. Defines permissions, roles, and access levels (e.g., read-only vs. admin). The definition here likely describes granting or restricting access.
Position 2 → Authentication The process of verifying identity via credentials (password, certificate, biometric, token). The definition here likely describes proving identity.
Position 3 → Accounting Logs and tracks user activity - session duration, commands run, bandwidth used, timestamps. Critical for auditing and billing. The definition here likely describes tracking or logging activity.
Position 4 → Authentication A second Authentication match - this is intentional. The definition here likely describes a specific mechanism of verifying identity (e.g., "uses a username and password") rather than Authorization or Accounting, which is a common trap.
Common Mistakes & Misconceptions
Authentication vs. Authorization is the #1 confusion point:
- Authentication = "who are you?" (comes first)
- Authorization = "what can you do?" (comes after authentication)
- You cannot authorize someone you haven't authenticated.
Accounting is often forgotten - students conflate it with Authorization because both start with "A." Remember: Accounting = audit logs, not access control.
The AAA order matters conceptually:
Authenticate → Authorize → Account
(Prove identity) → (Grant access) → (Log activity)
The fact that Authentication appears twice (positions 2 and 4) tests whether you can recognize different descriptions of the same concept - a deliberate distractor to make you second-guess yourself.
Topics
Community Discussion
No community discussion yet for this question.