2.8 Describe Network Device Management Access (Telnet, SSH, HTTP, HTTPS, Console, TACACS+/RADIUS, and Cloud Managed) 200-301 Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which statement correctly describes HTTP as a network device management method?

   • AHTTP encrypts all management traffic using TLS certificates.
   • BHTTP is a secure protocol that uses TCP port 443.
   • CHTTP transmits management data in plaintext and is not recommended for untrusted networks.
   • DHTTP uses UDP to provide faster, connectionless web management.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A retail chain is deploying hundreds of access points across many stores. The IT team is small and wants to manage all devices from a single web-based dashboard, push configuration updates centrally, and monitor health without visiting each store. Which management approach best meets these needs?

   • AUse a cloud-managed platform
   • BUse SSH to each access point individually
   • CUse console access for each access point
   • DUse HTTPS to each access point's web interface
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A company is implementing 802.1X for wired network access. They also want to use the same AAA infrastructure for administrative access to network devices. The security team requires per-command authorization for administrators. Which combination of AAA protocols should be used?

   • AUse TACACS+ for 802.1X and RADIUS for device administration.
   • BUse RADIUS for 802.1X and TACACS+ for device administration.
   • CUse RADIUS for both 802.1X and device administration.
   • DUse TACACS+ for both 802.1X and device administration.
   Reveal Solution Discussion Select an answer first
5. 34application · easy

   A junior administrator is troubleshooting a legacy device that only supports Telnet for remote management. The administrator needs to connect to the device from a management workstation. The device has an IP address and is reachable. Which statement about this connection is true?

   • AThe session uses TCP port 23
   • BThe session requires a console cable
   • CThe session uses UDP port 23
   • DThe session is encrypted, so credentials are safe
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A network team is deploying a centralized AAA solution. They need to authenticate administrators on network devices, authorize specific commands per role, and log all commands. They also need to authenticate remote VPN users. The team wants to minimize the number of servers. Which approach best meets these requirements?

   • AUse TACACS+ for both device administration and VPN authentication.
   • BUse RADIUS for both device administration and VPN authentication.
   • CUse TACACS+ for device administration and RADIUS for VPN authentication.
   • DUse LDAP for device administration and RADIUS for VPN authentication.
   Reveal Solution Discussion Select an answer first