2.8 Describe Network Device Management Access (Telnet, SSH, HTTP, HTTPS, Console, TACACS+/RADIUS, and Cloud Managed) 200-301 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A network administrator needs to implement centralized authentication for wireless users. Which protocol is commonly used for this purpose?

   • ASNMP
   • BTACACS+
   • CRADIUS
   • DNTP
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which statement correctly describes RADIUS as a centralized AAA protocol?

   • AIt uses UDP port 69 and is primarily used for file transfer.
   • BIt uses UDP ports 1812 and 1813 and combines authentication and authorization.
   • CIt uses TCP port 49 and separates authentication, authorization, and accounting.
   • DIt uses TCP port 443 and encrypts all traffic with TLS.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A network administrator discovers that a legacy device only supports Telnet for remote management. The device is critical and cannot be replaced immediately. The administrator must manage the device securely over an untrusted network. Which approach best mitigates the risk?

   • AUse Telnet with a strong password
   • BUse Telnet over a VPN tunnel
   • CUse HTTP instead of Telnet
   • DUse Telnet but restrict source IP addresses
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A network device offers a web-based management interface. The administrator notices that the login page is served over HTTP. The administrator wants to ensure that credentials are not transmitted in clear text. What should the administrator do?

   • AContinue using HTTP because it is faster
   • BUse Telnet instead of HTTP
   • CEnable HTTPS on the device and use it for management
   • DUse SNMP to manage the device
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A network engineer is troubleshooting a device that only supports Telnet. The device is in a remote location and the only network path is over the internet. The engineer must manage the device securely. What is the best approach?

   • AUse Telnet directly over the internet with a strong password.
   • BUse TACACS+ to encrypt the Telnet session.
   • CSet up an SSH tunnel to a jump host that is on the same network as the device, then use Telnet through the tunnel.
   • DUse HTTP to the device's web interface.
   Reveal Solution Discussion Select an answer first