AAA Operations: Authentication, Authorization, and Accounting
Short answer
B Authentication identifies users, and accounting tracks user services.
Question
Key Takeaways
The exam tests your ability to distinguish between identifying a user (Authentication) and tracking their actions (Accounting), avoiding the trap of confusing these with access control permissions.
This question tests the core definitions of AAA security components on Cisco exams. It establishes that Authentication identifies users, while Accounting tracks their services or activities.
Common mistake: Candidates often confuse the roles, incorrectly linking Authentication with Access Control or Authorization with User Identification, leading them to choose options like A or D.
Expert Analysis
Why the Answer Is Correct
Option B is correct because it accurately maps the functions of AAA components to their descriptions. Authentication is the process of verifying identity ('Who are you?'), which corresponds to 'identifies users'. Accounting is the process of recording activities for auditing ('What did they do?'), which corresponds to 'tracks user services'.
Why the Other Options Are Wrong
Option A is incorrect because Authentication does not track services; Accounting does. Option C is incorrect because Accounting does not provide access control; Authorization does. Option D is incorrect because Authorization does not identify users; Authentication does.
Community Comment Notes
The community consensus strongly supports B, often using mnemonics like 'Authentication = Who are you? Authorization = What can you do? Accounting = What have you done?' as seen in comments by ScorpionNet and maximus_007. Several users noted that this concept is foundational across multiple certifications, including Security+, reinforcing the standard definitions.
Exam Strategy
Memorize the distinct role of each AAA component: Authentication is identity verification, Authorization is permission granting, and Accounting is activity logging. Use simple questions like 'Who?', 'What?', and 'How much/When?' to recall these functions during the exam.
Frequently Asked Questions
What is the difference between Authentication and Authorization?
Why is Accounting considered tracking user services?
Discussion 9 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 9
-
Ali526 👍 45Authentication, Identify users Authorization, access control Accounting, track user services
-
ScorpionNet 👍 11B is correct Authentication = Who are you? Authorization = Here's some things you're only allowed to do Accounting = Hmm let's see what this person is doing
-
ZUMY 👍 9B is correct Authentication, Identify users Authorization, access control Accounting, track user services
-
ZayaB 👍 3C & D are also true according to the ALI526, therefore, why answer is B?
-
mtw5 👍 3This is a Sec+ question
Show 4 more comments
-
Zerotime0 👍 3Reread.
-
onikafei 👍 1Best way i found it is to cut out the different definitions of authentication the answers provide. Authentication is verifying your identity, its identifying the users. Access control is definitly not it lol, neither is tracking user services. Your not touching those without authentication lol
-
maximus_007 👍 1 Answered BAuthentication = Who are you? Authorization = What can you do? Accounting = What have you done?
-
2b081f1 👍 1 Answered BAnswer is B.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All 200-301 Questions
Access 220 questions with complete answers and detailed explanations.
View Full 200-301 Practice Test →