AAA Questions
9tut.com/aaa-questions-2
Home > AAA Questions
January 12th, 2021 Go to comments
Premium Member: You can test your knowledge with these questions first via this link
(via HTML).
If you are not sure about AAA, please read our AAA TACACS+ and RADIUS Tutorial.
Question 1
AAA stands for authentication, authorization, and accounting.
A. False
B. True
Answer: B
Question 2
Which effect does the aaa new-model configuration command have?
A. It configures the device to connect to a RADIUS server for AAA.
B. It configures a local user on the device.
C. It associates to RADIUS server to an AAA group.
D. It enables AAA services on the device.
Answer: D
Question 3
What is the primary difference between AAA authentication and authorization?
A. Authentication verifies a username and password, and authorization handles the
communication between the authentication agent and the user database
B. Authentication identifies a user who is attempting to access a system, and
authorization validates the users password
C. Authentication identifies and verifies a user who is attempting to access a system, and
authorization controls the tasks the user can perform
D. Authentication controls the system processes a user can access and authorization logs
9ie activities the user initiates
Answer: C
Explanation
AAA stands for Authentication, Authorization and Accounting.
1/3
+ Authentication: Specify who you are (usually via login username & password)
+ Authorization: Specify what actions you can do, what resource you can access
+ Accounting: Monitor what you do, how long you do it (can be used for billing and
auditing)
An example of AAA is shown below:
+ Authentication: “I am a normal user. My username/password is
user_tom/learnforever“
+ Authorization: “user_tom can access LearnCCNA server via HTTP and FTP“
+ Accounting: “user_tom accessed LearnCCNA server for 2 hours“. This user only
uses “show” commands.
Question 4
Refer to the exhibit. Which password must an engineer use to enter the enable mode?
Atlanta#config t
Atlanta(config)#aaa new-model
Atlanta(config)#aaa authentication login default local
Atlanta(config)#line vty 0 4
Atlanta(config-line)#login authentication default
Atlanta(config-line)#exit
Atlanta(config)#username ciscoadmin password adminadmin123
Atlanta(config)#username ciscoadmin privilege 15
Atlanta(config)#enable password cisco123
Atlanta(config)#enable secret testing1234
Atlanta(config)#end
A. adminadmin123
B. default
C. testing1234
D. cisco123
Answer: C
Explanation
If neither the enable password command nor the enable secret command is
configured, and if there is a line password configured for the console, the console line
password serves as the enable password for all VTY sessions -> The “enable secret” will be
used first if available, then “enable password” and line password.
Reference:
https://www.cisco.com/c/en/us/td/docs/optical/cpt/r9_3/configuration/guide/cpt93_c
onfiguration/cpt93_configuration_chapter_010000.pdf
Question 5
What is a difference between RADIUS and TACACS+?
2/3
A. RADIUS is most appropriate for dial authentication, but TACACS+ can be used for
multiple types of authentication
B. TACACS+ encrypts only password information and RADIUS encrypts the entire
payload
C. TACACS+ separates authentication and authorization, and RADIUS merges them
D. RADIUS logs all commands that are entered by the administrator, but TACACS+ logs
only start, stop, and interim commands
Answer: C
Question 6
How do AAA operations compare regarding user identification, user services and access
control?
A. Authorization provides access control and authentication tracks user services
B. Authentication identifies users and accounting tracks user services
C. Accounting tracks user services, and authentication provides access control
D. Authorization identifies users and authentication provides access control
Answer: B
Comments (2) Comments
1. Steelhead
September 25th, 2020
Not sure if C is the correct answer. The ciscoadmin has privilege level 15 so he will
be logged in directly to enabled mode so the answer could be A. adminadmin123
2. william
January 25th, 2021
first try
Add a Comment
Subscribe to comments feed
3/3
