Day 43

1. The three independent security functions that offer secure access control and are provided by AAA are as follows:

Accounting

Authentication

Approval

Auditing

Authorization

Question 1 of 14

2. Network Access Server (NAS), can be any device—such as a? (choose all which apply)

router

hub

firewall

switch

Question 2 of 14

3. An AV pair is simply a secured network object comprised of an attribute, such as a username or password, and a value for that particular attribute.

True

False

Question 3 of 14

4. Match the correct statements.

Authentication is valid without	authentication Unselect authorization Unselect accounting Unselect authentication Unselect
Authentication is valid without	authentication Unselect authorization Unselect accounting Unselect authentication Unselect
Authorization is not valid without	authentication Unselect authorization Unselect accounting Unselect authentication Unselect
Accounting is not valid without	authentication Unselect authorization Unselect accounting Unselect authentication Unselect

Question 4 of 14

5. Unlike accounting and authorization, there is no search for AV pairs in any kind of database for authentication.

True

False

Question 5 of 14

6. Unlike local SPAN, Remote SPAN (RSPAN) supports source ports and VLANs, as well as destinations on different switches, allowing you to perform remote monitoring of multiple switches across your network.

True

False

Question 6 of 14

7. For AAA, Authentication is used to validate identity (i.e., who the user is); authorization is used to determine what that particular user can do (i.e., the services available to the user); and accounting is used for audit trails (i.e., what that user did).

True

False

Question 7 of 14

8. You would globally enable AAA services using the ________ command in global configuration mode.

enable aaa

aaa new-model

aaa model

aaa enable

Question 8 of 14

9. RADIUS is an open-standard protocol that is distributed in C source code format.

True

False

Question 9 of 14

10. RADIUS is a Cisco-proprietary protocol that is used in the AAA framework to provide centralized authentication of users who are attempting to gain access to network resources.

True

False

Question 10 of 14

11. When configuring SPAN, the following restrictions apply when specifying ports as the source: (choose all that apply)

The port can be any port type, such as EtherChannel, FastEthernet, or GigabitEthernet.

The local SPAN source port cannot be configured as a destination port.

The port can be any port type, such as FastEthernet, or GigabitEthernet but not EtherChannel.

Source ports must be in the same VLAN.

Source ports can be in the same or different VLANs.

The same local port can be monitored in multiple SPAN sessions.

Question 11 of 14

12. Each local SPAN session can have either ports or VLANs as sources, or both.

True

False

Question 12 of 14

13. (AAA) Authentication also offers additional services, such as challenge and response, messaging support, and even encryption, depending on the security protocol implemented.

True

False

Question 13 of 14

14. (AAA) Authentication is based on verifying user credentials, which can be any of the following: (choose all which apply)

Something the user possesses

Something the user knows

Something the user is

Something the user was

Something the user does

Question 14 of 14