Day 43

1. The three independent security functions that offer secure access control and are provided by AAA are as follows:

Approval

Authorization

Authentication

Accounting

Auditing

Question 1 of 14

2. (AAA) Authentication is based on verifying user credentials, which can be any of the following: (choose all which apply)

Something the user possesses

Something the user is

Something the user was

Something the user knows

Something the user does

Question 2 of 14

3. When configuring SPAN, the following restrictions apply when specifying ports as the source: (choose all that apply)

The same local port can be monitored in multiple SPAN sessions.

The port can be any port type, such as FastEthernet, or GigabitEthernet but not EtherChannel.

The local SPAN source port cannot be configured as a destination port.

The port can be any port type, such as EtherChannel, FastEthernet, or GigabitEthernet.

Source ports can be in the same or different VLANs.

Source ports must be in the same VLAN.

Question 3 of 14

4. You would globally enable AAA services using the ________ command in global configuration mode.

aaa new-model

aaa model

aaa enable

enable aaa

Question 4 of 14

5. Each local SPAN session can have either ports or VLANs as sources, or both.

True

False

Question 5 of 14

6. An AV pair is simply a secured network object comprised of an attribute, such as a username or password, and a value for that particular attribute.

True

False

Question 6 of 14

7. (AAA) Authentication also offers additional services, such as challenge and response, messaging support, and even encryption, depending on the security protocol implemented.

True

False

Question 7 of 14

8. RADIUS is an open-standard protocol that is distributed in C source code format.

True

False

Question 8 of 14

9. Match the correct statements.

Authentication is valid without	authentication Unselect authentication Unselect accounting Unselect authorization Unselect
Authentication is valid without	authentication Unselect authentication Unselect accounting Unselect authorization Unselect
Authorization is not valid without	authentication Unselect authentication Unselect accounting Unselect authorization Unselect
Accounting is not valid without	authentication Unselect authentication Unselect accounting Unselect authorization Unselect

Question 9 of 14

10. Unlike local SPAN, Remote SPAN (RSPAN) supports source ports and VLANs, as well as destinations on different switches, allowing you to perform remote monitoring of multiple switches across your network.

True

False

Question 10 of 14

11. Network Access Server (NAS), can be any device—such as a? (choose all which apply)

hub

router

firewall

switch

Question 11 of 14

12. For AAA, Authentication is used to validate identity (i.e., who the user is); authorization is used to determine what that particular user can do (i.e., the services available to the user); and accounting is used for audit trails (i.e., what that user did).

True

False

Question 12 of 14

13. Unlike accounting and authorization, there is no search for AV pairs in any kind of database for authentication.

True

False

Question 13 of 14

14. RADIUS is a Cisco-proprietary protocol that is used in the AAA framework to provide centralized authentication of users who are attempting to gain access to network resources.

True

False

Question 14 of 14