CompTIA Network+ Practice Test

Which of the following is NOT a function of AAA in network security?

1. Authorization of user resources

2. Auditing of systems for security breaches

3. Authentication of user credentials

4. Accounting for resource usage

The correct answer is: Auditing of systems for security breaches

In the context of network security, AAA stands for Authentication, Authorization, and Accounting. Each component plays a distinct role in managing user access and tracking usage. Authentication verifies the identity of a user or device, ensuring that credentials such as usernames and passwords are legitimate. Authorization determines what resources a user is allowed to access after their identity has been confirmed. Accounting involves tracking user activities and the resources they utilize over time, providing a record of resource usage which is essential for billing, auditing, or tracking purposes. Auditing, while closely related to security, is not typically categorized as one of the primary functions of AAA. Instead, auditing refers to the assessment and review of systems to identify vulnerabilities or breaches, which goes beyond what AAA encompasses. Therefore, stating that auditing of systems for security breaches is a function of AAA is inaccurate, making it the correct choice for this question.