AAA Operations: Authentication, Authorization, and Accounting
How do AAA operations compare regarding user identification, user services, and access control?
Community Insight
The exam tests your ability to distinguish between identifying a user (Authentication) and tracking their actions (Accounting), avoiding the trap of confusing these with access control permissions.
This question tests the core definitions of AAA security components on Cisco exams. It establishes that Authentication identifies users, while Accounting tracks their services or activities.
Candidates often confuse the roles, incorrectly linking Authentication with Access Control or Authorization with User Identification, leading them to choose options like A or D.
Community Discussion (9 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Option B is correct because it accurately maps the functions of AAA components to their descriptions. Authentication is the process of verifying identity ('Who are you?'), which corresponds to 'identifies users'. Accounting is the process of recording activities for auditing ('What did they do?'), which corresponds to 'tracks user services'.Why the Other Options Are Wrong
Option A is incorrect because Authentication does not track services; Accounting does. Option C is incorrect because Accounting does not provide access control; Authorization does. Option D is incorrect because Authorization does not identify users; Authentication does.Community Comment Notes
The community consensus strongly supports B, often using mnemonics like 'Authentication = Who are you? Authorization = What can you do? Accounting = What have you done?' as seen in comments by ScorpionNet and maximus_007. Several users noted that this concept is foundational across multiple certifications, including Security+, reinforcing the standard definitions.Exam Strategy
Memorize the distinct role of each AAA component: Authentication is identity verification, Authorization is permission granting, and Accounting is activity logging. Use simple questions like 'Who?', 'What?', and 'How much/When?' to recall these functions during the exam.
Frequently Asked Questions
What is the difference between Authentication and Authorization?
Authentication verifies who the user is (identity), while Authorization determines what resources the user is allowed to access (permissions).
Why is Accounting considered tracking user services?
Accounting logs all user activities and resource usage for billing, auditing, and security monitoring purposes.
Related Analysis
Practice All 200-301 Questions
Access 220 questions with complete answers and detailed explanations.
View Full 200-301 Practice Test →