5.2 Apply Compute Security 350-601 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A Cisco Nexus switch is configured to use RADIUS for administrative authentication. The RADIUS server is reachable, but when a user attempts to log in, authentication fails. The shared secret is correct. What is the most likely cause of the failure?

   • AThe switch is configured with the wrong RADIUS server port.
   • BThe switch is not configured to use RADIUS for authorization.
   • CThe user is not a member of the correct RADIUS group.
   • DThe RADIUS server is not configured with the user's account.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A data center team manages a fleet of Cisco UCS Fabric Interconnects. They need to centralize authentication for all administrators. The security policy requires that each administrative command be individually authorized and that all commands be logged with the exact command string. The existing infrastructure includes a Microsoft Active Directory domain and a Cisco ISE deployment. Which authentication and authorization approach should the team configure on the UCS Fabric Interconnects?

   • AConfigure LDAP with Active Directory as the server and map AD groups to UCS roles.
   • BConfigure RADIUS with Cisco ISE as the server and use the default shell-based authorization.
   • CConfigure local authentication on each Fabric Interconnect and use the built-in audit log.
   • DConfigure TACACS+ with Cisco ISE as the server and define per-command authorization policies.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the core principle of Role-Based Access Control (RBAC)?

   • AAccess is granted based on the user's physical location
   • BPermissions are assigned to roles, and users are mapped to roles
   • CUsers are granted permissions directly based on their individual identity
   • DAccess is granted based on the sensitivity level of the data
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary benefit of integrating AAA services with a compute platform like Cisco UCS?

   • AIt increases the processing speed of the compute platform
   • BIt automatically encrypts all data stored on the compute platform
   • CIt eliminates the need for local user accounts on the compute platform
   • DIt centralizes authentication, authorization, and accounting across multiple systems
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which authentication protocol is designed to encrypt the entire body of the packet, including the username and password, and is commonly used with Cisco devices for centralized AAA?

   • AKerberos
   • BRADIUS
   • CTACACS+
   • DLDAP
   Reveal Solution Discussion Select an answer first