CompTIA Security+ (SY0-701)General Security ConceptsMedium
A network administrator configures a file server so that only members of the Finance security group can open payroll spreadsheets, while all other authenticated employees are denied access to that folder. Which AAA function is being applied?
- AAuditing
- BAccounting
- CAuthentication
- DAuthorization
Show answer & explanationAnswer & explanation
Correct answer: D. Authorization
Authorization determines what an already-authenticated user is permitted to do or access, such as restricting payroll files to the Finance group. Authentication only verifies identity, while accounting/auditing track and log activity after access occurs.
Why the other options are wrong
- A. Auditing reviews logs after the fact and is not a formal AAA term in this context.
- B. Accounting logs what was done, it does not decide permissions.
- C. Authentication verifies who the user is, not what they can access.
Authorization (AAA)
The AAA function that determines what resources or actions an authenticated identity is permitted to access.
- Occurs after authentication succeeds.
- Often implemented via RBAC, ACLs, or group policies.
- Answers 'what can this user do?' not 'who is this user?'
Memory trick: Authenticate who you are, then Authorize what you can do