Authentication

Question 1

AAA Framework

Answer 1

Authentication, Authorization, and Accounting (AAA) Framework → A security model that verifies identity, grants permissions, and tracks user activity.

Question 2

Authentication in AAA

Answer 2

Authentication → The first step in the AAA Framework that verifies a user’s or device’s identity before granting access.

Question 3

Authorization in AAA

Answer 3

Authorization → The second step in the AAA Framework that defines what actions or resources an authenticated entity can access.

Question 4

Accounting in AAA

Answer 4

Accounting → The third step in the AAA Framework that logs user activity for auditing and reporting.

Question 5

SSO

Answer 5

Single Sign-On (SSO) → Allows users to authenticate once and gain access to multiple systems without re-entering credentials.

Question 6

RADIUS

Answer 6

Remote Authentication Dial-In User Service (RADIUS) → A centralized AAA protocol that uses UDP ports 1812 and 1813.

Manages user wireless access to networks, WiFi, and VPNs

Question 7

LDAP

Answer 7

Lightweight Directory Access Protocol (LDAP) → A protocol for accessing and managing directory information such as usernames and passwords; runs on Transmission Control Protocol (TCP) port 389.

Question 8

X.500 Distinguished Names

Answer 8

The structured naming format used in directories like LDAP and Active Directory.

Common Name (CN)
Organizational Unit (OU)
Organization (O)
Locality (L)
State (ST)
Country (C)
Domain Component (DC)

Example: CN=Andrew Barrett, OU=Design, O=Brain Rot Creative, L=Cincinnati, ST=Ohio, C=US.

Question 9

X.500 Directory Information Tree

Answer 9

A hierarchical structure of directory data consisting of containers and leaf objects.

Example: a container for “Users” and leaf objects for each employee account.

Question 10

SAML

Answer 10

Security Assertion Markup Language (SAML) → An open standard for exchanging authentication and authorization data between identity providers and service providers.

Question 11

TACACS+

Answer 11

Terminal Access Controller Access-Control System Plus (TACACS+) → A Cisco-developed protocol that separates authentication, authorization, and accounting; runs on Transmission Control Protocol (TCP) port 49.

Question 12

MFA

Answer 12

Multi-Factor Authentication (MFA) → Security method using two or more factors: something you know (password), something you have (token), something you are (biometric), or somewhere you are (location).

Question 13

TOTP

Answer 13

Time-Based One-Time Password (TOTP) → A temporary passcode generated from a shared secret and current time, used in Multi-Factor Authentication (MFA).