5.8 Compare Authentication, Authorization, and Accounting Concepts 200-301 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company has 200 network devices and a security policy that requires: (1) all administrator commands be logged with the exact command string, (2) administrators be able to authenticate using existing Active Directory credentials, and (3) the solution must not require installing software on the domain controllers. The network team is considering RADIUS and TACACS+. Which solution best satisfies the requirements?

   • ATACACS+ with a separate AAA server that integrates with Active Directory
   • BRADIUS with Active Directory integration
   • CRADIUS with command logging via syslog
   • DLocal AAA with command logging enabled
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A network administrator needs to configure AAA on a Cisco router for console access. The company has a small team and only one router. They want to keep configuration simple and avoid dependence on external servers. Which AAA implementation should be chosen?

   • ACentralized TACACS+
   • BNo AAA, using only the enable password
   • CCentralized RADIUS
   • DLocal AAA
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A network administrator is configuring AAA for a Cisco switch. The requirement is that if the central AAA server is unreachable, the switch should still allow the local administrator account to log in. The administrator also wants to ensure that the central server is always tried first. Which configuration approach achieves this?

   • AConfigure the central server as the only method
   • BConfigure AAA authentication with a method list that lists the central server first and local as fallback
   • CConfigure local AAA as the only method
   • DUse local authentication and then RADIUS as a fallback
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company is implementing AAA for network access. The security team wants to ensure that if the central RADIUS server becomes unreachable, users can still authenticate using a local backup. The operations team wants to ensure that all authentication attempts are logged even when the RADIUS server is down. Which configuration approach best meets both requirements?

   • AUse TACACS+ instead of RADIUS
   • BConfigure RADIUS as the primary and local AAA as a fallback method
   • CUse only local AAA on all devices
   • DUse only RADIUS without a fallback
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   In the AAA framework, what is the primary purpose of accounting?

   • ATo determine which resources users are allowed to access
   • BTo encrypt user traffic to protect confidentiality
   • CTo track user actions and resource usage for auditing and billing
   • DTo verify the identity of users before they access the network
   Reveal Solution Discussion Select an answer first