5.1 Configure and Verify Device Access Control 350-401 Practice Questions (Page 3)

Questions 11–12

1. 11application · medium

   A network administrator needs to restrict console access on a Cisco switch so that only users with a local username and password can enter privileged EXEC mode. The switch currently has no AAA configuration. Which configuration meets the requirement?

   • AConfigure `password` on the console line and set `enable secret` globally.
   • BConfigure `login local` on the console line and create local users with privilege level 15.
   • CConfigure `aaa new-model` and `aaa authentication login default local` without line-level configuration.
   • DCreate local users and configure `login authentication` on the console line referencing a non-existent method list.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An organization uses RADIUS for authentication and wants to ensure that after authentication, administrators are automatically placed into privilege level 15. The RADIUS server is configured to return the appropriate attribute. Which AAA configuration is required on the Cisco device?

   • A`aaa accounting exec default start-stop group radius`
   • B`aaa authentication login default group radius`
   • C`aaa authorization exec default group radius`
   • D`aaa authorization commands 15 default group radius`
   Reveal Solution Discussion Select an answer first