AAA explanation and examples.

• A. Authentication logs events; Authorization encrypts data; Accounting provides user IDs.
• B. Authentication verifies identity (passwords, certificates); Authorization grants permissions (ACLs, RBAC); Accounting logs events (LMS, Radius, TACACS+).
• C. Authentication grants permissions; Authorization verifies identity; Accounting prevents access.
• D. Authentication uses firewalls; Authorization uses VPNs; Accounting uses IDS.

Answer: (B)

AAA is the framework used to control access to resources by separating three distinct functions. Authentication verifies who you are, typically with something you know or have such as passwords, certificates, or tokens. Authorization decides what you’re allowed to do once you’re authenticated, using mechanisms like access control lists or role-based access control. Accounting tracks what happened during and after the session, recording events and usage for auditing, billing, or monitoring, often via protocols and systems like RADIUS or TACACS+. The correct choice mirrors these roles exactly: identity verification (authentication), permission granting (authorization), and event logging (accounting) with appropriate examples. The other options mix up these roles or refer to security devices rather than the AAA functions, which is why they don’t fit.