Compare and Contrast Authentication, Authorization, and Accounting (AAA) POWERSWITCH-CAMPUS-DEPLOY Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A network administrator is configuring AAA on a switch. The requirement is that authentication must be performed by a RADIUS server, but command authorization must be performed by a TACACS+ server. Is this configuration possible, and what is the primary consideration?

   • ANo, a switch can only use one AAA protocol at a time.
   • BYes, but only if both servers are from the same vendor.
   • CNo, because RADIUS and TACACS+ use different ports and cannot coexist.
   • DYes, but the switch must be configured with both RADIUS and TACACS+ server addresses.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which AAA component would provide the data needed to bill a department for its network bandwidth usage?

   • AAuthentication
   • BAuthorization
   • CEncryption
   • DAccounting
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A network team is evaluating AAA protocols for switch administration. They need to support per-command authorization, where each command is checked against the user's permissions. They also need the protocol to encrypt the entire packet. Which protocol should they choose, and what is a key characteristic that supports this choice?

   • ATACACS+, because it uses UDP for faster command processing.
   • BRADIUS, because it supports per-command authorization natively.
   • CRADIUS, because it uses UDP for faster command processing.
   • DTACACS+, because it separates authorization from authentication and encrypts the entire packet.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A financial institution is required to retain logs of all administrative actions on network devices for seven years. The network team uses TACACS+ for device administration. The compliance officer wants to ensure that the logs are tamper-proof and that any attempt to modify them is detected. What should the administrator implement?

   • ADisable accounting to reduce log volume.
   • BStore TACACS+ accounting logs on the switch's local flash.
   • CStore logs in a standard syslog server with regular backups.
   • DForward TACACS+ accounting logs to a centralized, write-once, read-many (WORM) storage system.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A network administrator is choosing between RADIUS and TACACS+ for device administration. The security team requires that the protocol encrypt the entire payload, not just the password. Which protocol should the administrator select, and why?

   • ARADIUS, because it uses UDP and is faster.
   • BRADIUS, because it is an open standard.
   • CTACACS+, because it encrypts the entire body of the packet.
   • DTACACS+, because it uses UDP for faster communication.
   Reveal Solution Discussion Select an answer first