5.8 Compare Authentication, Authorization, and Accounting Concepts 200-301 Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company is planning to deploy a new AAA solution. The network has 200 switches and 10,000 users. The security team requires that all administrative commands be logged with the exact command and timestamp. The operations team requires that all user logins be centrally authenticated and that usage data be collected for billing. Which combination of protocols best meets these requirements?

   • ALocal AAA for administrative access and RADIUS for network access
   • BTACACS+ for administrative access and RADIUS for network access
   • CTACACS+ for both administrative and network access
   • DRADIUS for both administrative and network access
   Reveal Solution Discussion Select an answer first
2. 22expert · medium

   A network administrator notices that the RADIUS accounting logs show a user's session start time but no stop time for many sessions. The user is accessing the network via a wireless connection. What is the most likely reason for the missing stop times?

   • AThe user's device does not support RADIUS
   • BThe RADIUS server is using UDP port 1813
   • CThe RADIUS server is not configured for accounting
   • DThe user is still connected and the session has not ended
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A network administrator is comparing local AAA and centralized AAA for a network with 10 routers. The company has a small IT team and wants to minimize the administrative overhead of managing credentials. However, the company also wants to ensure that if the central server fails, administrators can still access the routers. Which approach best balances these requirements?

   • AUse local AAA on one router and centralized on the rest
   • BUse only local AAA on each router
   • CUse centralized AAA with a local fallback on each router
   • DUse centralized AAA without a fallback
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A large enterprise is deploying a new network access solution. The security team requires per-command authorization for network administrators, while the operations team requires detailed accounting for all user logins and data usage. The solution must also support 802.1X for wireless users. Which AAA protocol should be selected?

   • AKerberos
   • BRADIUS
   • CTACACS+
   • DLocal AAA
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A small branch office has a single router and only three administrators. The IT manager wants to keep the configuration simple and avoid dependency on external servers. Which AAA implementation method should be used for administrator access to the router?

   • ACentralized AAA with RADIUS
   • BNo AAA, use the enable password
   • CCentralized AAA with TACACS+
   • DLocal AAA on the router
   Reveal Solution Discussion Select an answer first