Free Practice Quiz Question List

4 AAA Fundamentals Online Quiz Questions

Use this free practice quiz with 20 questions to review 4 AAA Fundamentals, test your knowledge, and prepare for your next test or exam.

20 questions

Choose one

1 point

On a Cisco IOS-style device, what does a method list named default do for the relevant service?

A
It is used only when a local database is unavailable.
B
It applies by default to the relevant service.
C
It applies only to the VTY lines numbered 0 through 4.
D
It records activity without requiring an accounting method.

Choose one

1 point

An organization wants to manage accounts and access policies consistently across many network devices. Which approach best fits that goal?

A
Centralized AAA
B
A separate local database on each device
C
Accounting without authentication
D
A named method list that bypasses the AAA server

Choose one

1 point

A Cisco IOS-style login method list tries TACACS+ and then local authentication. The TACACS+ server responds and denies a user's login. What should you expect?

A
The device always tries the local account after any TACACS+ result.
B
The device tries the local account because a denial means the server did not respond.
C
The device does not bypass the server's denial by trying the local account.
D
The device grants access because the server has responded.

Choose one

1 point

A small network needs access control that can continue working without an external AAA server. Which is a suitable advantage of using each device's local database?

A
It centrally synchronizes policies across all devices.
B
It can work independently of an AAA server and suit a small number of devices.
C
It requires a reachable TACACS+ server for each login.
D
It automatically centralizes accounting records from every device.

Choose all

1 point

Select all accurate descriptions of the three AAA functions.

A
Authentication verifies a user's identity.
B
Authorization determines which commands or resources an authenticated user may use.
C
Accounting records activity such as session times or commands used.
D
Authentication by itself determines every command the user may run.

Choose all

1 point

Select all statements accurately describing TACACS+ or RADIUS.

A
TACACS+ is commonly used for network-device administration.
B
RADIUS is described as separating authentication, authorization, and accounting, while TACACS+ combines them.
C
TACACS+ separates its authentication, authorization, and accounting functions.
D
RADIUS cannot return service or configuration information.

True or false

1 point

Recording session activity can support auditing and troubleshooting, but the recording itself does not grant the user access.

A
True
B
False

True or false

1 point

A named AAA method list can be applied to a specific line or service.

A
True
B
False

Written response

1 point

In centralized AAA, what is the term for the network device that sends requests to the shared server?

Written response

1 point

Which protocol is commonly used for centralized network-device administration and separates authentication, authorization, and accounting?

Written response

1 point

In the command aaa accounting exec default start-stop group tacacs+, how many distinct session boundaries are recorded by start-stop? Enter the count as an integer.

Fill in the blank

1 point

In the illustrative Cisco IOS-style setup, the authorization request covers the user's session, and the accounting method records activity.

Fill in the blank

1 point

RADIUS can return service and information.

Open ended

1 point

You are preparing to enable AAA on a production device. Explain why you should keep an active management session open while testing a second login, and describe one additional safeguard to use before deployment.

Written response

1 point

On Cisco IOS-style devices, what single-word method-list name applies by default to the relevant service?

Choose one

1 point

An administrator has successfully logged in. Which AAA function determines whether that administrator may change a switch's configuration?

A
Checking whether the submitted credentials match an identity
B
Deciding which commands an authenticated user may use
C
Recording the user's session start and stop times
D
Creating a shared user database across devices

Choose one

1 point

A small site has only a few network devices and needs access control to keep working if its AAA server is unreachable. Which approach best fits this need?

A
Use centralized AAA because each device must contact a shared server to authenticate locally
B
Use local access control because each device can check its own user database without an AAA server
C
Use accounting because it creates accounts on devices automatically
D
Use a named method list because it stores user credentials centrally

Choose one

1 point

An organization wants to manage accounts and access policies consistently across many network devices. Which approach best meets that goal?

A
Centralized AAA, because it supports shared identity and policy management across many devices
B
Local access control, because it automatically synchronizes accounts across all devices
C
Accounting, because it determines which commands each user may run
D
A named method list, because it removes the need for device-server communication

Choose one

1 point

An administrator creates a method list named ops rather than using default. Which statement describes how a named method list can be used?

A
It always overrides every other method list on the device
B
It is used only to record session start and stop times
C
It can be applied to a specific line or service
D
It automatically provides local authentication if a server denies access

True or false

1 point

On Cisco IOS-style method lists, if the TACACS+ server responds and denies access, the device then tries the local account.

A
True
B
False