1.1 Identify the Components of the Authentication, Authorization, and Accounting (AAA) Framework CYBERSECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a common authentication method used in network access?

   • ANetwork address translation (NAT)
   • BUsername and password
   • CVirtual LAN (VLAN) assignment
   • DAccess control list (ACL)
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A security analyst is reviewing the AAA logs for a network device. The analyst finds that a user authenticated successfully, but was denied access to a specific command. The user's account is configured with the correct permissions. Which AAA component is most likely responsible for this denial?

   • AAuthorization
   • BAccounting
   • CAuthentication
   • DThe RADIUS server
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company is implementing 802.1X for wired network access. The security team wants to use certificates on the client devices for authentication. However, some legacy devices do not support certificate-based authentication. What is the most appropriate way to handle these legacy devices while maintaining security?

   • ADisable 802.1X on the ports connected to legacy devices
   • BUse MAC authentication bypass (MAB) as a fallback for legacy devices
   • CRequire the legacy devices to use a shared password
   • DReplace all legacy devices with new ones that support certificates
   Reveal Solution Discussion Select an answer first
5. 14application · easy

   An organization wants to implement multi-factor authentication (MFA) for VPN access. Users currently authenticate with a username and password. Which additional factor should the organization add to satisfy MFA?

   • AA security question like 'What is your mother's maiden name?'
   • BThe user's IP address
   • CA one-time passcode (OTP) generated by an authenticator app on the user's smartphone
   • DA second password that the user memorizes
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A network administrator is configuring a router to use a RADIUS server for AAA. The administrator wants to ensure that if the RADIUS server is unreachable, the router will still allow the administrator to log in using the local database. Which configuration approach should the administrator use?

   • AConfigure the local database as the primary authentication method and RADIUS as the fallback
   • BConfigure both RADIUS and the local database to be used simultaneously
   • CConfigure RADIUS as the primary authentication method and the local database as the fallback
   • DDisable authentication fallback to prevent security bypass
   Reveal Solution Discussion Select an answer first