A security auditor requires that every administrative action on a network device be traceable to a specific user, including the exact command executed. The device currently uses a shared enable password for all administrators. Which change is necessary to meet the auditor's requirement?

Implement per-user authentication and command accounting

After a user successfully authenticates to a network, what does authorization determine?

Whether the user's credentials are valid

How the user's activity will be logged for auditing

The encryption algorithm used for the user's session

Which resources and actions the user is permitted to access

Which statement best describes how the components of the AAA framework work together?

Authorization verifies identity, accounting grants permissions, and authentication records activity

Authentication verifies identity, authorization grants permissions, and accounting records activity

Authentication grants permissions, authorization verifies identity, and accounting encrypts data

Accounting verifies identity, authentication records activity, and authorization encrypts data

CiscoCertified Network Associate (CCNA)

Domain 5Objective 8

5.8 Compare Authentication, Authorization, and Accounting Concepts 200-301 Practice Questions (Page 2)

Part of the Security Fundamentals domain, which accounts for 15% of the 200-301 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

5concepts

15%of the exam

Questions 6–10

6expert · hard
A security auditor requires that every administrative action on a network device be traceable to a specific user, including the exact command executed. The device currently uses a shared enable password for all administrators. Which change is necessary to meet the auditor's requirement?
Select an answer first
7foundation · easy
A network administrator configures a switch port to require a username and password before allowing a device to connect. Which security concept is being implemented?
Select an answer first
8foundation · easy
After a user successfully authenticates to a network, what does authorization determine?
Select an answer first
9foundation · easy
A network administrator assigns a user account read-only privileges to a file server. Which AAA concept is being applied?
Select an answer first
10foundation · easy
Which statement best describes how the components of the AAA framework work together?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-301

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-301” is a trademark of its owner, used for identification only.

5.8 Compare Authentication, Authorization, and Accounting Concepts 200-301 Practice Questions (Page 2)

Questions 6–10

A security auditor requires that every administrative action on a network device be traceable to a specific user, including the exact command executed. The device currently uses a shared enable password for all administrators. Which change is necessary to meet the auditor's requirement?

A network administrator configures a switch port to require a username and password before allowing a device to connect. Which security concept is being implemented?

After a user successfully authenticates to a network, what does authorization determine?

A network administrator assigns a user account read-only privileges to a file server. Which AAA concept is being applied?

Which statement best describes how the components of the AAA framework work together?

Keep studying — Security Fundamentals