Quiz
CCNA Security Chapter 3 Exam
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (23)
1Because of implemented security controls, a user can only access a server with FTP. Which AAA component accomplishes this?
- Aaccounting
- Baccessibility
- Cauditing
- Dauthorization
- Eauthentication
2Why is authentication with AAA preferred over a local database method?
- AIt provides a fallback authentication method if the administrator forgets the username or password
- BIt uses less network bandwidth
- CIt specifies a different password for each line or port
- DIt requires a login and password combination on the console, vty lines, and aux ports
3Which authentication method stores usernames and passwords in ther router and is ideal for small networks
- Alocal AAA over TACACS+
- Bserver-based AAA over TACACS+
- Clocal AAA
- Dlocal AAA over RADIUS
- Eserver-based AAA over RADIUS
- Fserver-based AAA
4Which component of AAA allows an administrator to track individuals who access network resources and any changes that are made to those resources?
- Aaccounting
- Baccessibility
- Cauthentication
- Dauthorization
5Refer to the exhibit. Router R1 has been configured as shown, with the resulting log message. On the basis of the information that is presented, which two statements describe the result of AAA authentication operation? (Choose two.)
- AThe locked-out user stays locked out until the clear aaa local user lockout username Admin command is issued
- BThe locked-out user stays locked out until the interface is shut down then re-enabled
- CThe locked-out user is locked out for 10 minutes by default
- DThe locked-out user should have used the username admin and password Str0ngPa55w0rd
- EThe locked-out user failed authentication.
6A user complains about being locked out of a device after too many unsuccessful AAA login attempts. What could be used by the network administrator to provide a secure authentication access method without locking a user out of a device
- AUse the login delay command for authentication attempts.
- BUse the login local command for authenticating user access
- CUse the aaa local authentication attempts max-fail global configuration mode command with a higher number of acceptable failures
- DUse the none keyword when configuring the authentication method list
7A user complains about not being able to gain access to a network device configured with AAA. How would the network administrator determine if login access for the user account is disabled?
- AUse the show aaa local user lockout command
- BUse the show running-configuration command
- CUse the show aaa sessions command
- DUse the show aaa user command
8When a method list for AAA authentication is being configured, what is the effect of the keywordlocal
- AThe login succeeds, even if all methods return an error
- BIt uses the enable password for authentication
- CIt accepts a locally configured username, regardless of case
- DIt defaults to the vty line password for authentication
9Which solution supports AAA for both RADIUS and TACACS+ servers?
- AImplement Cisco Secure Access Control System (ACS) only
- BRADIUS and TACACS+ servers cannot be supported by a single solution
- CImplement a local database.
- DImplement both a local database and Cisco Secure
- EAccess Control System (ACS)
10What difference exists when using Windows Server as an AAA server, rather than Cisco Secure ACS?
- AWindows Server requires more Cisco IOS commands to configure
- BWindows Server only supports AAA using TACACS
- CWindows Server uses its own Active Directory (AD) controller for authentication and authorization
- DWindows Server cannot be used as an AAA server
11What is a characteristic of TACACS+?
- ATACACS+ uses UDP port 1645 or 1812 for authentication, and UDP port 1646 or 1813 for accounting
- BTACACS+ is backward compatible with TACACS and XTACACS
- CTACACS+ is an open IETF standard
- DTACACS+ provides authorization of router commands on a per-user or per-group basis
12Which two features are included by both TACACS+ and RADIUS protocols? (Choose two.)
- A802.1X support
- Bseparate authentication and authorization processes
- CSIP support
- Dpassword encryption
- Eutilization of transport layer protocols
13Which server-based authentication protocol would be best for an organization that wants to apply authorization policies on a per-group basis
- ASSH
- BRADIUS
- CACS
- DTACACS+
14Refer to the exhibit. Which statement describes the configuration of the ports for Server1?
- AThe configuration using the default ports for a Cisco router
- BThe configuration of the ports requires 1812 be used for the authentication and the authorization ports
- CThe configuration will not be active until it is saved and Rtr1 is rebooted.
- DThe ports configured for Server1 on the router must be identical to those configured on the RADIUS server
15True or False?
The single-connection keyword prevents the configuration of multiple TACACS+ servers on a AAA-enabled router.- ATrue
- BFalse
16Why would a network administrator include a local username configuration, when the AAA-enabled router is also configured to authenticate using several ACS servers?
- ABecause ACS servers only support remote user access, local users can only authenticate using a local username database
- BA local username database is required when configuring authentication using ACS servers
- CThe local username database will provide a backup for authentication in the event the ACS servers become unreachable
- DWithout a local username database, the router will require successful authentication with each ACS server
17Which debug command is used to focus on the status of a TCP connection when using TACACS+ for authentication?
- Adebug tacacs events
- Bdebug tacacs
- Cdebug tacacs accounting
- Ddebug aaa authentication
18Which characteristic is an important aspect of authorization in an AAA-enabled network device?
- AThe authorization feature enhances network performance.
- BUser access is restricted to certain services
- CUser actions are recorded for use in audits and troubleshooting events
- DA user must be identified before network access is granted
19What is the result of entering the aaa accounting network command on a router?
- AThe router collects and reports usage data related to network-related service requests
- BThe router outputs accounting data for all EXEC shell sessions
- CThe router provides data for only internal service requests
- DThe router outputs accounting data for all outbound connections such as SSH and Telnet
20What is a characteristic of AAA accounting?
- APossible triggers for the aaa accounting exec default command include start-stop and stop-only
- BAccounting can only be enabled for network connections
- CAccounting is concerned with allowing and disallowing authenticated users access to certain areas and programs on the network
- DUsers are not required to be authenticated before AAA accounting logs their activities on the network.
21When using 802.1X authentication, what device controls physical access to the network, based on the authentication status of the client?
- Athe router that is serving as the default gateway
- Bthe authentication server
- Cthe switch that the client is connected to
- Dthe supplicant
22What device is considered a supplicant during the 802.1X authentication process?
- Athe client that is requesting authentication
- Bthe switch that is controlling network access
- Cthe router that is serving as the default gateway
- Dthe authentication server that is performing client authentication
23What protocol is used to encapsulate the EAP data between the authenticator and authentication server performing 802.1X authentication?
- ASSH
- BMD5
- CTACACS+
- DRADIUS
Information
- Description
- CCNA Security Chapter 3 Exam
- Author
- d94829 d94829
- Language
- English
- Views
- 1,172
- Tags
- Rating
- No ratings yet Rate this quiz