CiscoCertified Network Professional Security
Domain 2Objective 6
2.6 Troubleshoot AAA for Device and Network Access Such as TACACS+ and RADIUS 350-701 Practice Questions (Page 5)
Part of the Network Security domain, which accounts for 25% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)
32questions here
7free pages
11concepts
25%of the exam
Questions 21–25
- 21
Which debug command would you use on a Cisco IOS device to trace TACACS+ authentication and authorization transactions?
Select an answer first - 22
When configuring AAA for network access on a Cisco ASA for VPN authentication, which command defines a RADIUS server group and specifies the server address?
Select an answer first - 23
In the AAA framework, which component determines what a successfully authenticated user is permitted to do on the network or device?
Select an answer first - 24
Which UDP ports does RADIUS use by default for authentication and accounting, respectively?
Select an answer first - 25
In TACACS+ device administration, a user can log in but cannot execute certain commands. What is the most likely cause?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.