5.1 Configure and Verify Device Access Control 350-401 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   An administrator wants to track every privileged EXEC command entered by users for security auditing. Which AAA accounting command should be configured?

   • Aaaa accounting network default start-stop group tacacs+
   • Baaa accounting system default start-stop group tacacs+
   • Caaa accounting exec default start-stop group tacacs+
   • Daaa accounting commands 15 default start-stop group tacacs+
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which line configuration command enables the use of locally defined usernames for authentication on a vty line?

   • Apassword local
   • Blogin authentication default
   • Clogin local
   • Dusername local
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A network administrator is troubleshooting why a user cannot log in to a Cisco router via SSH. The router has AAA enabled with `aaa authentication login default group radius local`. The RADIUS server is reachable and the user's credentials are correct. However, the user is still denied. Which configuration issue is most likely the cause?

   • AThe user is not in the local database.
   • BThe RADIUS server is not configured with the correct shared secret.
   • CThe VTY lines are configured with `login local` instead of `login authentication default`.
   • DThe router is not configured with `aaa new-model`.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company wants to use TACACS+ to control which administrators can enter privileged EXEC mode. The TACACS+ server is configured to return the appropriate privilege level. Which AAA configuration is required?

   • A`aaa authentication login default group tacacs+`
   • B`aaa accounting exec default start-stop group tacacs+`
   • C`aaa authorization commands 15 default group tacacs+`
   • D`aaa authorization exec default group tacacs+`
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which AAA accounting command records information about user EXEC sessions, including start and stop times, for auditing purposes?

   • Aaaa accounting exec default start-stop group tacacs+
   • Baaa accounting network default start-stop group tacacs+
   • Caaa accounting commands 15 default start-stop group tacacs+
   • Daaa accounting connection default start-stop group tacacs+
   Reveal Solution Discussion Select an answer first