Outline the Components of AAA Security POWERSWITCH-DATA-CENTER-DEPLOY Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A Dell PowerSwitch has an authentication list configured as 'tacacs+' followed by 'local'. The TACACS+ server is reachable but is returning 'access-reject' for a specific administrator. The administrator is unable to log in, even though a valid local account exists. What is the most likely reason for this behavior?

   • AThe local account password does not match the TACACS+ server password.
   • BThe authentication list is not applied to the line the administrator is using.
   • CThe switch does not fall back to local authentication when the TACACS+ server returns 'access-reject'.
   • DThe TACACS+ server is configured to reject the user, but the switch should still try local as a fallback.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   After defining an authentication list on a Dell PowerSwitch, what must be done to make it effective for user logins?

   • ACreate a local user account
   • BApply the list to a login method
   • CEnable AAA globally
   • DReboot the switch
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A Dell PowerSwitch is configured with a RADIUS server for authentication and local accounts as a fallback. The RADIUS server is currently unreachable. An administrator attempts to log in via SSH and is successfully authenticated using the local account. However, after login, the administrator is unable to enter privileged EXEC mode. What is the most likely cause?

   • AThe VTY lines are configured to require a specific authentication method for privileged mode.
   • BThe local account does not have the correct privilege level to enter privileged EXEC mode.
   • CThe enable password is not configured on the switch.
   • DThe RADIUS server is also responsible for authorization, and since it is unreachable, authorization fails.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   An organization needs to generate a detailed audit trail of all configuration changes made by network administrators on Dell PowerSwitch devices. The compliance team requires records of who executed each command, when it was executed, and from which source IP address. Which AAA component and protocol combination best fulfills this requirement?

   • AAuthorization using TACACS+, which logs every command as part of the authorization process.
   • BAuthentication using RADIUS, which logs successful and failed login attempts with full command context.
   • CAccounting using RADIUS, which sends detailed command-level logs to the RADIUS server.
   • DAccounting using TACACS+, which can record each command executed by an administrator.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which authentication method on Dell PowerSwitch devices uses a local database of usernames and passwords stored directly on the switch?

   • ATACACS+
   • BLocal authentication
   • CRADIUS
   • DLDAP
   Reveal Solution Discussion Select an answer first