VPN Login with RADIUS
A remote employee connects to the corporate VPN. They enter their username and password. The VPN concentrator forwards these credentials to the organization's RADIUS server. RADIUS checks its user database, verifies the credentials, and responds with "Access-Accept." The concentrator then grants the user access to the internal network. RADIUS also logs the login time and user session information for accounting purposes.
Device Certificate Authentication
MegaLogistics deploys 300 barcode scanners in warehouses worldwide. The IT team creates a corporate Certificate Authority (CA), generates a unique digital certificate for each scanner, and installs them on the devices. When a scanner connects to the corporate Wi-Fi, it presents its certificate. The network infrastructure verifies the certificate against the CA's signature. If valid: device is authenticated, no password required. This allows automated, secure device authentication at scale.
Hospital RBAC Implementation
A hospital implements role-based access control. Roles defined: Physician, Nurse, Pharmacist, Billing, IT Admin. A physician is authorized to view and write patient records but not access billing systems. A pharmacist can view medication orders but not patient notes. When a new nurse is hired, IT simply adds them to the "Nurse" role — they instantly receive the correct access to all 40+ systems the Nurse role has permissions for. No individual permission mapping needed.
Which AAA Component Logs Login Times?
"An organization needs to track when users log in and out and how much data they transfer." Which AAA component handles this?
Answer: Accounting. The accounting component records: login time, logout time, session duration, data sent, data received. It creates the audit trail used for investigations and compliance. Authentication verifies identity. Authorization grants access. Accounting records it all.
Identification vs. Authentication — What's the Difference?
A student says: "When I type my username AND password, I'm authenticating." Is this correct?
Partially — it's actually two steps: Typing the username = Identification (claiming who you are). Typing the password = Authentication (proving who you are). These are conceptually separate steps even though they happen together in a login form.