AAA & Identity
Security
Overview
Authentication proves an identity, authorization decides permitted actions and accounting records activity. MFA strengthens authentication but does not grant every privilege. Service accounts and human accounts need different lifecycle and monitoring controls.
Protocol stages
- 1Authentication
- 2Authorization
- 3Action
- 4Accounting
Interactive exercise
Knowledge check
An authenticated junior operator attempts a restricted firewall change. What decides whether it is permitted?
Educational model — not real hardware, traffic or official certification.