Which step is a required part of completing authentication in an AAA redirect flow?

• A. Log the user accesses, including invalid login attempts, in an audit log
• B. Maintain a session timeout, after which users must authenticate again to regain access to the intranet
• C. Collect the user's credentials to cache them in a directory that is accessible through LDAP
• D. Verify that the user is authorized to access specific intranet content

Answer: (A)

In an AAA redirect flow, keeping an audit trail of authentication events is essential. Logging user accesses, including invalid login attempts, is the built-in way to record who tried to authenticate, whether the attempt succeeded, and when it happened. This accounting data supports security monitoring, incident response, and regulatory compliance, and it completes the picture of who accessed resources.

After authentication is handled, the system may move on to authorization (deciding what the user can access) and session management. The other options don’t represent the step that completes authentication itself: maintaining a session timeout is about managing active sessions, not the act of verifying identity; collecting credentials to cache in LDAP is not how credentials should be stored or handled; and verifying authorization is a separate step from authentication.