問題文
An auditor asks which part of the AAA framework makes it possible to answer the question "who changed this setting, and when?" What is the role of that part?
選択肢
- None of the three; answering that question needs a separate backup system, because the framework stops at the point where the session has been set up.
- Accounting records the actions that an identified subject performed, so activity can be attributed and reviewed later.
- Authentication records the actions, because the identity check happens first and therefore holds the complete picture of the session.
- Authorization records the actions, because the component that decides whether an action is permitted is also the component that keeps the history of every decision it made, and that history is what an auditor reads.