Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) v1.2SecurityEasy
A network administrator is configuring AAA (Authentication, Authorization, and Accounting) on a Cisco router. The administrator wants to ensure that all administrative access attempts (Telnet, SSH, console) are logged to a central server, including who logged in, when, and what commands they executed. Which AAA component is responsible for collecting and sending this operational data?
- AAccess-list
- BAuthentication
- CAccounting
- DAuthorization
Show answer & explanationAnswer & explanation
Correct answer: C. Accounting
Accounting is the AAA component responsible for collecting and recording information about user activity, such as login times, network resource usage, and commands executed. This data is typically sent to a central server for auditing and reporting.
Why the other options are wrong
- A. Access-lists are used for packet filtering and have no direct role in AAA functionality.
- B. Authentication verifies the identity of a user or device.
- D. Authorization determines what a verified user or device is allowed to do.
AAA Accounting
The component of AAA that collects and records information about user activities on a network device, including login sessions, network resource consumption, and commands executed.
- Provides auditing and reporting capabilities.
- Tracks 'who did what, when, and where'.
- Data is typically sent to a RADIUS or TACACS+ server.
- Essential for security forensics and compliance.
Memory trick: AAA: Authenticate, Authorize, Account for Everything