AAA & Gap Analysis

Question 1

AAA

Answer 1

Authentication, authorization, and accounting (AAA) → security framework that controls identity verification, access permissions, and activity tracking.

Question 2

Authentication in AAA

Answer 2

Authentication in authentication, authorization, and accounting (AAA) → verifies the identity of a user, device, or system.

Question 3

Authorization in AAA

Answer 3

Authorization in authentication, authorization, and accounting (AAA) → determines what actions an authenticated user is allowed to perform.

Question 4

Accounting in AAA

Answer 4

Accounting in authentication, authorization, and accounting (AAA) → tracks user activity and resource usage for auditing and logging.

Question 5

CA

Answer 5

Certificate authority (CA) → trusted entity that issues and manages digital certificates.

Question 6

Certificate-Based Authentication

Answer 6

Certificate-based authentication → authentication method using digital certificates instead of passwords.

Question 7

Authorization Models

Answer 7

Authorization models → structured approaches for assigning permissions such as role-based or rule-based access control.

Question 8

No Authorization Model

Answer 8

No authorization model → environment where users have unrestricted access with no defined permission structure.

Question 9

Gap Analysis

Answer 9

Gap analysis → process of comparing current security posture to a desired baseline using a chosen framework.

Question 10

Gap Analysis Compare and Contrast

Answer 10

Gap analysis compare and contrast → evaluates differences between current controls and required controls to identify weaknesses and priorities.