Outline the Components of AAA Security POWERSWITCH-DATA-CENTER-DEPLOY Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A small data center has a single Dell PowerSwitch with no external AAA servers. The administrator wants to ensure that only users with locally defined accounts can access the switch via SSH. The local accounts have been created with appropriate passwords. What is the minimal configuration required to meet this requirement?

   • ASet the enable password and require it for all SSH sessions.
   • BEnable AAA globally and configure a RADIUS server as a fallback to local authentication.
   • CCreate an authentication list with 'local' as the only method and apply it to the VTY lines.
   • DApply the default authentication list to the console line only.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which authentication method on Dell PowerSwitch devices uses a server that typically combines authentication and authorization in a single packet exchange and uses UDP by default?

   • ATACACS+
   • BRADIUS
   • CKerberos
   • DLocal authentication
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security team is choosing between RADIUS and TACACS+ for authenticating administrators on Dell PowerSwitch devices. The team's primary concern is that the protocol must encrypt the entire authentication exchange, including the username, and must also allow separate authorization of each command an administrator types. Which protocol should the team select?

   • ARADIUS, because it uses TCP port 1812 and provides granular command-level control.
   • BTACACS+, because it uses UDP port 49 and is simpler to deploy in a routed environment.
   • CTACACS+, because it encrypts the entire body of the packet and separates authentication from authorization.
   • DRADIUS, because it encrypts the entire packet payload and supports per-command authorization.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A compliance auditor requires a record of every command executed by administrators on Dell PowerSwitch devices, including the timestamp and the source IP address. The organization uses TACACS+ for AAA. Which configuration is necessary to meet this requirement?

   • AEnable AAA accounting and configure it to send command records to the TACACS+ server.
   • BEnable AAA authentication and configure the TACACS+ server to log all authentication attempts.
   • CEnable AAA authorization and configure the TACACS+ server to log all authorization requests.
   • DEnable local logging on the switch and set the logging level to informational.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A Dell PowerSwitch is configured with a primary RADIUS server and a secondary RADIUS server for administrator authentication. The primary server is temporarily down for maintenance. The switch is currently unable to authenticate any administrator login attempts. What is the most likely cause of this behavior?

   • AThe switch is configured to use RADIUS for authentication but not for authorization.
   • BThe RADIUS server timeout is set too low, causing the switch to give up before trying the secondary.
   • CThe RADIUS shared secret is incorrect on the secondary server.
   • DThe secondary RADIUS server is not configured in the authentication list.
   Reveal Solution Discussion Select an answer first