Which AAA command enables authorization for all network-related services (such as PPP and SLIP) using the default method list?

aaa authorization network default group tacacs+

aaa authorization auth-proxy default group tacacs+

aaa authorization commands 15 default group tacacs+

aaa authorization exec default group tacacs+

Which AAA command is used to define a server group that includes a RADIUS server for use in authentication method lists?

aaa group server radius RADIUS-GROUP

aaa authentication server radius RADIUS-GROUP

server-group radius RADIUS-GROUP

A network team uses TACACS+ for authentication. They want to restrict which commands each administrator can run after login, based on their TACACS+ profile. Which AAA feature must be configured to enforce these per-command restrictions?

AAA authorization for exec services

AAA authorization for commands at privilege levels

A network administrator wants to restrict which commands a user can execute in privileged EXEC mode based on the user's identity. Which AAA authorization command should be used?

aaa authorization commands 15 default group tacacs+

aaa authorization exec default group tacacs+

aaa authorization network default group tacacs+

aaa authorization config-commands default group tacacs+

A network engineer needs to secure the console port of a Cisco switch so that a password is required before the user can enter privileged EXEC mode. Which command sequence accomplishes this?

enable secret cisco line console 0

line console 0 password cisco login

username admin secret cisco line console 0 login local

line vty 0 4 password cisco login

CiscoCertified Network Professional Enterprise

Domain 5Objective 1

5.1 Configure and Verify Device Access Control 350-401 Practice Questions (Page 2)

Part of the 5.0 Security domain, which accounts for 20% of the 350-401 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 3–4 from this objective — we provide 12 practice questions to prepare you well beyond it. (estimate)

12questions here

3free pages

4concepts

20%of the exam

Questions 6–10

6foundation · easy
Which AAA command enables authorization for all network-related services (such as PPP and SLIP) using the default method list?
Select an answer first
7foundation · easy
Which AAA command is used to define a server group that includes a RADIUS server for use in authentication method lists?
Select an answer first
8application · medium
A network team uses TACACS+ for authentication. They want to restrict which commands each administrator can run after login, based on their TACACS+ profile. Which AAA feature must be configured to enforce these per-command restrictions?
Select an answer first
9foundation · easy
A network administrator wants to restrict which commands a user can execute in privileged EXEC mode based on the user's identity. Which AAA authorization command should be used?
Select an answer first
10foundation · easy
A network engineer needs to secure the console port of a Cisco switch so that a password is required before the user can enter privileged EXEC mode. Which command sequence accomplishes this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-401” is a trademark of its owner, used for identification only.