A security analyst investigates suspicious login activity using system logs. Which AAA category is being used?

Rationale

Accounting is the AAA category being used in the investigation of suspicious login activity.

Accounting involves tracking user actions and system activities, which is essential for analyzing login attempts and identifying patterns of potentially malicious behavior. In this context, the security analyst examines logs to gather data on user interactions, which falls under the accounting category of AAA.

A (Authorization) YOUR ANSWER

Authorization refers to the process of determining what an authenticated user is allowed to do within a system. While it plays a role in access control, it does not pertain to monitoring or logging user activity, which is the focus of the security analyst's investigation.

B (Accounting) CORRECT

Accounting is the correct choice as it pertains to the collection and analysis of logs and user activity. This category focuses on recording what users do after they are authenticated, which is critical for identifying and responding to suspicious behavior.

C (Confidentiality) YOUR ANSWER

Confidentiality relates to protecting information from unauthorized access and ensuring that sensitive data is kept secure. Although important in cybersecurity, it does not involve the analysis of user login activity or the tracking of events in system logs.

D (Authentication) YOUR ANSWER

Authentication is the process of verifying the identity of a user or device attempting to access a system. While it is integral to security protocols, it does not encompass the evaluation of user actions or the review of logs, which is what the analyst is focused on.

Conclusion

In summary, accounting is the AAA category that focuses on logging and monitoring user activities, making it essential for investigating suspicious login behavior. The other categories—authorization, confidentiality, and authentication—serve different purposes within security frameworks and do not directly involve the analysis of system logs. Understanding these distinctions helps security analysts effectively monitor and respond to potential threats.

A security analyst investigates suspicious login activity using system logs. Which AAA category is being used?

Accounting is the AAA category being used in the investigation of suspicious login activity.

Related Questions

Related Quizzes

How familiar were you with this question?

Report an Issue

Rate this Practice Test