Configure and Verify the Operation of AAA Security in OS10 POWERSWITCH-DATA-CENTER-DEPLOY Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   After configuring a RADIUS server, which additional configuration is required to enable RADIUS-based authentication for login?

   • ACreate an authentication method list that includes radius and apply it to login.
   • BEnable RADIUS globally with the 'radius enable' command.
   • CAssign the RADIUS server to a VLAN.
   • DReboot the switch to activate the RADIUS server configuration.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security team wants to track all configuration changes made by administrators on an OS10 switch. They have a TACACS+ server available. Which accounting configuration should be used to record each command entered in configuration mode?

   • AConfigure 'aaa accounting exec' with the 'stop-only' method and TACACS+ as the server.
   • BConfigure 'aaa accounting system' with the 'start-stop' method and TACACS+ as the server.
   • CConfigure 'aaa accounting commands' with the 'start-stop' method and TACACS+ as the server.
   • DEnable 'logging console' and set the severity to 'informational'.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the default authentication method for login when no AAA authentication method list is explicitly configured on an OS10 switch?

   • ATACACS+
   • BNone
   • CLocal
   • DRADIUS
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A small lab environment has an OS10 switch with no external AAA servers. The administrator wants to ensure that only users with the 'sysadmin' role can enter configuration mode, while users with other roles can only run 'show' commands. What is the most appropriate way to achieve this?

   • ADisable the 'configure' command for all users except the administrator.
   • BConfigure RADIUS authorization and point it to a non-existent server.
   • CSet all users to the 'read-only' role and use the 'enable' password for configuration access.
   • DConfigure local authorization for 'commands' and assign the 'sysadmin' role to the appropriate users.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An OS10 switch is configured with a RADIUS server for authentication. The administrator wants to verify that the switch is sending authentication requests to the correct server and that the server is responding. Which command provides the most direct information about the RADIUS server's status and activity?

   • Ashow radius-server statistics
   • Bshow ip route
   • Cshow aaa authentication
   • Dshow running-configuration | include radius
   Reveal Solution Discussion Select an answer first