5.8 Compare Authentication, Authorization, and Accounting Concepts 200-301 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is a primary advantage of using centralized AAA (such as RADIUS or TACACS+) compared to local AAA?

   • ACentralized AAA eliminates the need for user authentication
   • BCentralized AAA is simpler to configure on a single device
   • CCentralized management of user credentials and policies across multiple devices
   • DCentralized AAA does not require any network connectivity to function
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company is deploying a new remote-access VPN for 500 employees. They need a centralized solution that can authenticate users, assign different access policies based on group membership, and log all connections. Which AAA implementation is most appropriate?

   • ALocal database on each client
   • BCentralized TACACS+ server
   • CCentralized RADIUS server
   • DLocal AAA on the VPN gateway
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A network administrator configures a new wireless network for guests. The requirement is that guests must prove who they are before getting any network access, and once authenticated, they should only be able to reach the internet, not internal corporate resources. Which two AAA functions are being implemented in this order?

   • AAuthentication, then accounting
   • BAuthorization, then accounting
   • CAccounting, then authentication
   • DAuthentication, then authorization
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A network administrator wants to ensure that only employees with valid domain credentials can log in to the company's Cisco switches. The switches are not currently integrated with any central authentication system. Which approach should the administrator use to meet this requirement with minimal additional infrastructure?

   • AUse TACACS+ with the domain controller as the AAA server
   • BEnable SSH with a shared secret for all administrators
   • CConfigure local usernames and passwords on each switch
   • DConfigure the switches to use RADIUS authentication against the domain controller
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In the context of network security, what is the primary purpose of authentication?

   • ATo determine which resources a verified user is allowed to access
   • BTo encrypt data transmitted between the user and the network
   • CTo record user activity for auditing and billing purposes
   • DTo verify the identity of a user or device attempting to access the network
   Reveal Solution Discussion Select an answer first