1.1 Identify the Components of the Authentication, Authorization, and Accounting (AAA) Framework CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company needs to track the total amount of time each user spends connected to the VPN for security monitoring. The VPN gateway is configured to send accounting data to a RADIUS server. Which type of accounting record will provide the start and stop times for each VPN session?

   • AAuthentication record
   • BAccounting start and stop records
   • CAuthorization record
   • DInterim accounting update records
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security team suspects that a user's account was compromised and used to access a sensitive server. The team needs to determine exactly what commands the user executed during the suspected breach window. The server is configured to send AAA data to a TACACS+ server. Which type of data should the team analyze?

   • AAccounting logs from the TACACS+ server
   • BAuthorization logs from the TACACS+ server
   • CThe server's local syslog
   • DAuthentication logs from the TACACS+ server
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which AAA protocol is widely used for network access and is known for combining authentication and authorization in a single message?

   • ATACACS+
   • BIPsec
   • CRADIUS
   • DKerberos
   Reveal Solution Discussion Select an answer first
5. 9application · easy

   A user successfully authenticates to a file server but is unable to access a shared folder. The user's account is a member of the 'Sales' group, and the shared folder's permissions grant 'Read' access only to the 'Marketing' group. What is the most likely reason the user cannot access the folder?

   • AThe accounting system did not record the user's login attempt
   • BThe authentication process failed to verify the user's password
   • CThe authorization policy does not grant the user permission to the folder
   • DThe user's account is locked out due to too many failed attempts
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company deploys a new wireless network for guests. The security team wants to verify the identity of each guest before granting network access, but does not want to create individual accounts for every visitor. Which authentication method should the security team use?

   • AA shared pre-shared key (PSK) posted at the front desk
   • BA captive portal that requires guests to enter a code sent to their mobile phone
   • C802.1X with a certificate installed on each guest device
   • DMAC address filtering that allows only registered devices
   Reveal Solution Discussion Select an answer first