In the AAA framework, which component is primarily responsible for auditing user activity?

In the AAA framework, which component is primarily responsible for auditing user activity?

• A. Authentication
• B. Authorization
• C. Access control
• D. Accounting

Answer: (D)

Auditing user activity is handled by Accounting in the AAA framework. Accounting is about recording what users do—logins, resources accessed, actions taken, timestamps, and session duration—so you have a verifiable trail for security reviews, forensics, and compliance. Authentication verifies who you are; Authorization decides what you’re allowed to do; the access control mechanisms enforce those permissions. None of these by themselves provide the ongoing activity logs that Accounting specializes in.

Auditing user activity is handled by Accounting in the AAA framework. Accounting is about recording what users do—logins, resources accessed, actions taken, timestamps, and session duration—so you have a verifiable trail for security reviews, forensics, and compliance. Authentication verifies who you are; Authorization decides what you’re allowed to do; the access control mechanisms enforce those permissions. None of these by themselves provide the ongoing activity logs that Accounting specializes in.