Cisco Cybersecurity Essentials 13.4

Multiple Choice

Which of the following is NOT a function provided by the AAA protocol in network security?

• Authentication

• Authorization

• Accounting

• Encryption

Open Ended

Explain the difference between local AAA authentication and server-based AAA authentication, and describe a scenario where each would be most appropriate.

Multiple Select

Which of the following statements about centralized AAA systems is/are correct?

• Centralized AAA systems can use LDAP for user authentication.

• Centralized AAA systems are less scalable than local AAA authentication.

• Devices can communicate with centralized AAA servers using RADIUS or TACACS+ protocols.

• Centralized AAA systems cannot maintain separate databases for authentication, authorization, and accounting.

Multiple Choice

What is the purpose of AAA accounting?

• to collect and report application usage

• to determine which resources the user can access

• to prove users are who they say they are

• to determine which operations the user can perform

Multiple Choice

Which types of accounting information can be collected by AAA systems?

• Resource Accounting

• Command Accounting

• Network Accounting

• All of the above

Match

Match the following

• is a way to understand security issues surrounding the accessibility of individuals within an organization.

• are physical or behavioral human characteristics that can be used to digitally identify a person to grant access to a system.

• a way to record a log of who logs in, when the login occurs, and when the person logs out.

• If both domains trust each other,

• most organizations use a single sign-on

AAA framework

biometric readings

accounting

two-way trust

SSO

• AAA framework

• biometric readings

• accounting

• two-way trust

• SSO