A user cannot authenticate via TACACS+. You verify that the TACACS+ server is reachable from the device. What is the next most likely thing to check?

The shared secret configured on the device and server

The routing table on the user's PC

The DNS settings on the TACACS+ server

When using debug commands on a production router, what is the most important precaution to take?

Disable debugging after troubleshooting to avoid CPU overhead

Use debug ip packet instead of protocol-specific debug

Enable debug on all interfaces to capture all traffic

Reboot the router to clear the debug buffer

You notice that no accounting records are being sent to the RADIUS server. Which command should you check to ensure accounting is enabled for the relevant service?

aaa authentication login default group radius

aaa accounting network default start-stop group radius

aaa authorization network default group radius

Which command is used on a Cisco IOS device to test AAA authentication with a specific user and password against a configured TACACS+ server?

test aaa group tacacs+ user admin password cisco123

CiscoCertified Network Professional Security

Domain 2Objective 6

2.6 Troubleshoot AAA for Device and Network Access Such as TACACS+ and RADIUS 350-701 Practice Questions (Page 1)

Part of the Network Security domain, which accounts for 25% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

11concepts

25%of the exam

Questions 1–5

1foundation · easy
A user cannot authenticate via TACACS+. You verify that the TACACS+ server is reachable from the device. What is the next most likely thing to check?
Select an answer first
2application · medium
A network team notices that TACACS+ accounting records for 'show' commands are missing from the server, although authentication and authorization are working correctly. The administrator wants to verify that accounting packets are being generated and sent. Which debug command should be used to observe the accounting traffic?
Select an answer first
3foundation · easy
When using debug commands on a production router, what is the most important precaution to take?
Select an answer first
4foundation · easy
You notice that no accounting records are being sent to the RADIUS server. Which command should you check to ensure accounting is enabled for the relevant service?
Select an answer first
5foundation · easy
Which command is used on a Cisco IOS device to test AAA authentication with a specific user and password against a configured TACACS+ server?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.