200-301: Cisco Certified Network AssociateDemo

In AAA, Authentication identifies the user and decides whether access is allowed, so permitting or denying login attempts belongs there. Authentication can use methods such as local databases, PPP-related authentication, RADIUS, and TACACS+. Accounting logs what the user did after access is granted, including which services were used and how much network resource consumption occurred. Authorization is the AAA function that assigns permissions or per-user attributes, so that statement is the distractor.