8.1 Implement Device Access Controls (including RADIUS and TACACS+) 300-430 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A Cisco WLC is accessible via both HTTP and HTTPS for management. The security team wants to enforce HTTPS only and also restrict management access to the IT department's subnet. The engineer has already enabled HTTPS and disabled HTTP. What additional configuration is needed to restrict access to the IT subnet?

   • AConfigure a login banner that warns unauthorized users.
   • BApply an ACL to the management interface that permits only the IT subnet.
   • CChange the HTTPS port to a non-standard port.
   • DEnable SSH and disable HTTPS.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A Cisco WLC administrator wants to restrict what commands a junior network engineer can execute after logging in. The engineer should only be able to run 'show' commands. Which AAA component and protocol combination should be used?

   • AAuthorization using TACACS+
   • BAuthentication using RADIUS
   • CAccounting using RADIUS
   • DAuthorization using RADIUS
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which statement accurately compares RADIUS and TACACS+?

   • ARADIUS is primarily used for device administration, while TACACS+ is used for network access.
   • BRADIUS encrypts only the password, while TACACS+ encrypts the entire packet payload.
   • CRADIUS uses TCP, while TACACS+ uses UDP.
   • DTACACS+ separates authentication and authorization, while RADIUS combines them.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which scenario is the best use case for TACACS+ rather than RADIUS?

   • AAuthenticating VPN remote access users.
   • BAuthenticating network administrators and authorizing specific CLI commands on network devices.
   • CAuthenticating wireless users connecting to a WLAN.
   • DAuthenticating users on a web portal for guest access.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary purpose of AAA accounting?

   • ATo encrypt communication between the device and the AAA server.
   • BTo verify the identity of users before they access the network.
   • CTo determine which commands a user is allowed to run.
   • DTo record user activities and resource usage for auditing and billing.
   Reveal Solution Discussion Select an answer first