8.1 Implement Device Access Controls (including RADIUS and TACACS+) 300-430 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A Cisco WLC administrator needs to implement device administration authentication that encrypts the entire session and allows per-command authorization. The existing RADIUS server is already used for network access authentication. Which protocol should be used for device administration to meet these requirements?

   • ALDAP
   • BKerberos
   • CTACACS+
   • DRADIUS
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which protocol should be enabled on a Cisco wireless controller to provide encrypted management access?

   • ATelnet
   • BSNMPv2c
   • CSSH
   • DHTTP
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A Cisco 9800 WLC has a management interface with IP address 10.10.10.2/24. The security policy states that only the network operations center (NOC) subnet 192.168.100.0/24 should be able to access the management interface via SSH. Which configuration should be applied to enforce this restriction?

   • AApply an IPv4 ACL that permits 192.168.100.0/24 and denies all other traffic to the management interface.
   • BSet the management interface to a different VLAN and use VLAN ACLs.
   • CConfigure the management interface to use DHCP and rely on the default gateway for filtering.
   • DEnable SSH and disable Telnet on the WLC.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is deploying a new Cisco Catalyst 9800 WLC and wants to use a centralized AAA server for device administration. The security team requires that each administrator be limited to a specific set of commands after login, and that the entire command session be encrypted, including the username and password. Which AAA protocol should be used for device administration?

   • ATACACS+ using a shared secret to encrypt the entire TACACS+ session
   • BRADIUS using EAP-TLS for authentication and command authorization via vendor-specific attributes
   • CTACACS+ using CHAP for authentication and authorization via the WLC's local privilege levels
   • DRADIUS using PAP for authentication and a separate authorization policy on the WLC
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the purpose of configuring a AAA server group on a Cisco wireless controller?

   • ATo enable SNMP traps for authentication failures.
   • BTo define which VLANs are allowed for management access.
   • CTo group multiple AAA servers so they can be referenced as a single entity in authentication method lists.
   • DTo assign different IP addresses to the same physical server for load balancing.
   Reveal Solution Discussion Select an answer first