Describe the Benefits and Use Cases for Authentication, Authorization, and Accounting (AAA) POWERSWITCH-CAMPUS-DEPLOY Practice Questions (Page 3)

Questions 11–15

1. 11application · easy

   A hospital's network administrator suspects that a specific user account is being used to access the guest VLAN during off-hours. The administrator needs to produce a report that shows exactly which commands were run and when, to present to the security officer. Which AAA component is essential for generating this report?

   • AAccounting, to log the user's sessions, commands, and timestamps
   • BAuthorization, to confirm the user has permission to access the guest VLAN
   • CA combination of authentication and authorization only, since the report is generated from the access policy
   • DAuthentication, to verify the user's password before allowing the report to be generated
   Reveal Solution Discussion Select an answer first
2. 12application · easy

   A school district wants to allow students to log in to the campus Wi-Fi using their existing Active Directory credentials, while preventing them from accessing the administrative network segment. The network team plans to use a RADIUS server for this purpose. Which AAA component is primarily responsible for verifying that the student's credentials are valid?

   • AAccounting
   • BAuthentication
   • CAuthentication and authorization combined, since both are needed to verify credentials
   • DAuthorization
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary benefit of using authentication in a campus network?

   • AIt determines which files a user can read or write after logging in.
   • BIt ensures that only verified users and devices can gain access to the network.
   • CIt records all user activity for later review by administrators.
   • DIt encrypts all data transmitted between the user and the network.
   Reveal Solution Discussion Select an answer first
5. 14application · easy

   A large enterprise has multiple departments (HR, Finance, Engineering) sharing the same campus network. The network team wants to ensure that HR users can only access HR servers, Finance users can only access Finance servers, and Engineering users can only access Engineering servers. They plan to use a central AAA server with RADIUS. Which AAA component is primarily responsible for enforcing these departmental access restrictions?

   • AAccounting, by logging which servers each user accesses and blocking violations
   • BAuthentication and accounting, since access is based on identity and logging
   • CAuthorization, by defining per-group access policies for each department
   • DAuthentication, by checking which department the user belongs to during login
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the main purpose of authorization in a network security framework?

   • ATo encrypt data transmitted between the user and the network.
   • BTo determine what actions or resources an authenticated user is allowed to access.
   • CTo verify the identity of a user attempting to access the network.
   • DTo record the activities performed by a user during a network session.
   Reveal Solution Discussion Select an answer first