After suspicious Wi-Fi logins at city hall, investigators need evidence of who authenticated, when, and from which session. Which AAA function best supplies that telemetry?
Select an answer to reveal the explanation.
Short Explanation
Accounting is the AAA diary—who got on, when, and how long. That trail is what incident responders reach for after odd city-hall logins. Louder radios and nightly SSID renames do not build an audit trail.
Full Explanation
AAA accounting complements authentication and authorization by recording WLAN access events useful for forensics and compliance. Correlating usernames, timestamps, NAS identifiers, and session data helps investigate suspicious municipal Wi-Fi activity. Disabling RADIUS or changing cosmetic SSID names removes or weakens that telemetry.