Switches and the firewall should check administrators against one directory before allowing them to sign in. Which service performs that check?
Select an answer to reveal the explanation.
Short Explanation
The devices should ask a central desk whether this person is allowed in, instead of keeping a private list on every box. You use an authentication, authorization, and accounting service. A log collector, a time server, and a print queue do not approve those sign-ins.
Full Explanation
Authentication, authorization, and accounting, often called AAA, is the service that checks an account against a central directory, decides what the account may do, and records the attempt. Switches and a firewall that must use one directory need that service. A syslog server receives logs. It does not approve a sign-in. An NTP server sets clocks. It is not a directory check. A print server queues print jobs. It does not authenticate administrators to network devices. Exam caveat: the devices still need the address of the AAA service and a shared trust. Pointing at the directory in a diagram does not configure the switch. Operational check: sign in with a directory account, confirm a disabled account is refused, and confirm the attempt is recorded. Try a disabled account and confirm the switch refuses it. Record the result on the ticket before you close the call. Record the rejected sign-in so accounting is shown, not only the allow.