A Cisco WLC is configured to use TACACS+ for device administration. The security team wants to ensure that the 'reload' command can only be executed by the senior administrator. Which TACACS+ feature should be used to enforce this?

Using RADIUS instead of TACACS+

Authentication with a strong password

A Cisco WLC is configured to use TACACS+ for device administration. The security team requires that all commands executed by administrators be logged and that each command be authorized individually. Which TACACS+ features should be enabled?

Command authorization and command accounting

Command authorization and exec accounting

Authentication and exec authorization

Authentication and command accounting

A Cisco WLC is configured to use RADIUS for device administration. The RADIUS server is at 10.10.10.5 with a shared secret of 'Cisco123'. The administrator wants to verify that the WLC can communicate with the RADIUS server. Which command should be used?

test aaa group radius admin Cisco123

A network engineer is configuring a Cisco 9800 WLC for device administration. The security team requires that all administrative logins be authenticated against the corporate RADIUS server, but if that server is unreachable, the local admin account must still work. The engineer has already defined the RADIUS server and a local user named 'admin'. Which configuration step is required to meet the requirement?

Set the RADIUS server's timeout to 0 so that authentication fails immediately and local is used.

Configure the local user with the same password as the RADIUS server's shared secret to enable automatic fallback.

Create a fallback method list that includes local as the second method and apply it to the login authentication method list.

Define the RADIUS server as the only authentication method and rely on the controller's built-in local fallback behavior.

In a TACACS+ environment, what does authorization control after a user has been authenticated?

Which RADIUS server will be used for accounting.

Whether the user's password is encrypted during transmission.

How long the user's session can remain idle before being disconnected.

Which commands and privileges the user is allowed to execute.

CiscoCertified Network Professional Enterprise Wireless (ENWLSI)

Domain 8Objective 1

8.1 Implement Device Access Controls (including RADIUS and TACACS+) 300-430 Practice Questions (Page 3)

Part of the Device Hardening domain, which accounts for 10% of the 300-430 exam. Cisco does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

10%of the exam

Questions 11–15

11expert · hard
A Cisco WLC is configured to use TACACS+ for device administration. The security team wants to ensure that the 'reload' command can only be executed by the senior administrator. Which TACACS+ feature should be used to enforce this?
Select an answer first
12application · medium
A Cisco WLC is configured to use TACACS+ for device administration. The security team requires that all commands executed by administrators be logged and that each command be authorized individually. Which TACACS+ features should be enabled?
Select an answer first
13application · medium
A Cisco WLC is configured to use RADIUS for device administration. The RADIUS server is at 10.10.10.5 with a shared secret of 'Cisco123'. The administrator wants to verify that the WLC can communicate with the RADIUS server. Which command should be used?
Select an answer first
14application · medium
A network engineer is configuring a Cisco 9800 WLC for device administration. The security team requires that all administrative logins be authenticated against the corporate RADIUS server, but if that server is unreachable, the local admin account must still work. The engineer has already defined the RADIUS server and a local user named 'admin'. Which configuration step is required to meet the requirement?
Select an answer first
15foundation · easy
In a TACACS+ environment, what does authorization control after a user has been authenticated?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 300-430

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “300-430” is a trademark of its owner, used for identification only.