What is the primary different between AAA authentication and authorization?
A . Authentication verifies a username and password, and authorization handles the communication between the authentication agent and the user database
B . Authentication identifies a user who is attempting to access a system, and authorization validates the users password
C . Authentication identifies and verifies a user who is attempting to access a system, and authorization controls the tasks the user can perform
D . Authentication controls the system processes a user can access and authorization logs the activities the user initiates
Answer: C
Explanation:
AAA stands for Authentication, Authorization and Accounting.
+ Authentication: Specify who you are (usually via login username & password)
+ Authorization: Specify what actions you can do, what resource you can access
+ Accounting: Monitor what you do, how long you do it (can be used for billing and auditing) An example of AAA is shown below:
+ Authentication: “I am a normal user. My username/password is user_tom/learnforever”
+ Authorization: “user_tom can access LearnCCNA server via HTTP and FTP”
+ Accounting: “user_tom accessed LearnCCNA server for 2 hours”. This user only uses “show” commands.