CompTIA Security+ (SY0-701)General Security ConceptsEasy
A security analyst reviews logs showing exactly which employee accessed a specific file and at what time. This capability is an example of which element of the AAA framework?
- AAuthentication
- BAccounting
- CAuthorization
- DIdentification
Show answer & explanationAnswer & explanation
Correct answer: B. Accounting
Accounting in the AAA framework tracks and records user activity, such as file access and timestamps, to support auditing and non-repudiation.
Why the other options are wrong
- A. Authentication verifies a user's identity, such as with a password.
- C. Authorization determines what an authenticated user is permitted to do.
- D. Identification is claiming an identity, not tracking activity.
Accounting (AAA)
The AAA component that logs and tracks user activities for auditing, billing, or forensic purposes.
- Provides audit trails
- Supports non-repudiation
- Often implemented via RADIUS/TACACS+ logging
Memory trick: Accounting = Actions on record