Describe the Benefits and Use Cases for Authentication, Authorization, and Accounting (AAA) POWERSWITCH-CAMPUS-DEPLOY Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A network administrator is configuring AAA on a switch and wants to ensure that a specific user, 'jsmith', can only run 'show' commands, while another user, 'jdoe', can run 'show' and 'reload' commands. The AAA server supports per-command authorization. Which configuration approach best meets this requirement?

   • AConfigure separate authorization policies for 'jsmith' and 'jdoe'
   • BConfigure accounting to log commands and manually review them for violations
   • CConfigure authentication to allow both users to log in, and rely on the switch's default privilege level
   • DConfigure a single authorization policy that allows 'show' commands for all users
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which statement correctly describes the role of the three components in the AAA framework?

   • AAuthentication determines permissions, authorization verifies identity, and accounting controls access.
   • BAuthentication records activity, authorization verifies identity, and accounting determines permissions.
   • CAuthentication verifies identity, authorization determines permitted actions, and accounting records user activity.
   • DAuthentication controls access, authorization records activity, and accounting verifies identity.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A university campus network has 12,000 students and 400 staff. The IT team currently manages local accounts on each access switch, and a recent audit found that a former staff member's credentials still work on several devices. The network manager wants a single point of control for all network device logins, with the ability to immediately revoke access when someone leaves. Which AAA component combination directly addresses the revocation and centralization requirement?

   • AAuthentication and accounting only, using local databases on each switch with syslog export
   • BAuthentication, authorization, and accounting, but with each switch maintaining its own local user database synchronized nightly
   • CAuthentication and authorization only, using a central RADIUS/TACACS+ server for device login
   • DAccounting only, using a central syslog server to collect login logs from all switches
   Reveal Solution Discussion Select an answer first
5. 19application · easy

   A financial firm is required by regulators to produce a monthly report of all administrative access to its network switches, including who logged in, when, and what commands were executed. The firm uses a central AAA server. Which AAA component configuration is necessary to generate this report?

   • AConfigure authorization policies to restrict which commands each administrator can run
   • BConfigure both authentication and authorization to ensure only authorized commands are logged
   • CEnable accounting on the switches to send detailed logs to the AAA server
   • DEnable authentication on the switches to verify administrator identities before login
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company's security team is investigating a data breach that occurred on a campus switch. The AAA server has accounting enabled, but the logs show that the user 'admin' logged in at 2:00 AM and logged out at 2:15 AM, with no commands recorded in between. The security team suspects the user executed commands during that window. What is the most likely reason for the missing command logs?

   • AThe accounting configuration on the switch only logs login and logout events, not individual commands
   • BThe authentication server was down during the session
   • CThe authorization policy prevented the user from running any commands
   • DThe user did not execute any commands during the session
   Reveal Solution Discussion Select an answer first