Outline the Components of AAA Security POWERSWITCH-DATA-CENTER-DEPLOY Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the purpose of creating a local user account on a Dell PowerSwitch?

   • ATo enable local authentication as a primary or fallback method
   • BTo set up logging to a syslog server
   • CTo configure RADIUS server settings
   • DTo enable SNMP monitoring
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In the context of AAA security, which component is responsible for verifying the identity of a user attempting to access a network device?

   • AAuditing
   • BAuthorization
   • CAuthentication
   • DAccounting
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A Dell PowerSwitch is configured with TACACS+ for authentication and command authorization. The security team wants to ensure that a specific administrator can only run 'show' commands, but the TACACS+ server is currently returning an 'access-accept' for all commands. The switch is configured to use TACACS+ for command authorization. What is the most likely reason the restriction is not being enforced?

   • AThe TACACS+ server is not configured with the correct per-command authorization attributes for this user.
   • BThe administrator is logging in via the console, which bypasses command authorization.
   • CThe switch is configured to use TACACS+ for authentication but not for command authorization.
   • DThe switch is using a local privilege level that overrides TACACS+ command authorization.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A network engineer is configuring AAA on a Dell PowerSwitch that will be managed by a central TACACS+ server. The engineer wants to ensure that if the TACACS+ server becomes unreachable, administrators can still log in using locally defined accounts. The local accounts have already been created. Which configuration step must be completed to meet this requirement?

   • AApply the authentication list to the console and VTY lines using the 'login authentication' command.
   • BConfigure the TACACS+ server host and shared secret, then test connectivity from the switch.
   • CEnable the 'aaa new-model' command globally to activate all AAA features on the switch.
   • DCreate an authentication list that specifies 'tacacs+' followed by 'local' as the method, then apply it to the login methods.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which statement correctly compares RADIUS and TACACS+ in terms of encryption and port usage?

   • ATACACS+ encrypts the entire packet and uses TCP port 49
   • BRADIUS encrypts the entire packet and uses TCP port 49
   • CTACACS+ encrypts only the password and uses UDP port 1812
   • DRADIUS encrypts the entire packet and uses UDP port 1812
   Reveal Solution Discussion Select an answer first