AAA vs CIA Challenge

Authentication

100

Authentication

What AAA component verifies user identity?

300

Password + OTP, Password + fingerprint, Smart card + PIN

Name one example of multi-factor authentication

500

Because they can be guessed, stolen, reused, or phished.

Why are passwords alone considered weak authentication?

Authorization

100

Authorization rules / permissions

What determines what a user is allowed to access?

300

Role-Based Access Control (RBAC)

What authorization method assigns access based on job role?

500

Users may get too much access or unauthorized access to resources.

What happens if authorization is misconfigured?

Accounting

100

Accounting

Which AAA component keeps logs of user activity?

300

They help track actions, detect misuse, and investigate incidents.

Why are logs important for security investigations?

500

Integrity

Which CIA pillar is most affected if accounting is missing?

CIA Basics

100

Confidentiality

What does the “C” in CIA stand for?

300

Integrity

Which CIA pillar ensures data is not altered?

500

Denial of Service (DoS), DDoS attack, System crash, Server outage

Give one example of an availability attack.

Real-World Scenarios

100

Confidentiality

MFA mainly protects which CIA pillar?

300

Availability

A system crash affects which CIA pillar most?

500

AAA: Accounting, CIA: Integrity

Logs show unauthorized changes, which AAA and CIA elements are involved?