AAA (Authentication, Authorization, and Accounting) --Lesson 1.2

CompTIA + Security Cert

What does AAA stand for in information security?

Authentication, Authorization, and Accounting.

What is the purpose of authentication in AAA?

To verify a user's identity using credentials like passwords or certificates.

What does authorization determine in AAA?

What resources a user can access based on roles or group membership.

What is the role of accounting in AAA?

To log and track user activity for auditing and accountability.

How does a VPN concentrator use AAA?

It relies on a central AAA server to validate user credentials before granting access.

How are devices authenticated in a secure network?

Using digital certificates signed by a Certificate Authority (CA).

What does a Certificate Authority do?

Issues and signs digital certificates to establish trust in device authentication.

Why use role-based or group-based authorization?

To simplify permission management and improve scalability.

Why is assigning individual permissions not scalable?

It becomes complex and error-prone as the number of users and resources grows.

How does group-based access control help?

Users inherit permissions from their group, streamlining access management.