QCM AAA

What is the primary purpose of AAA (Authentication, Authorization, and Accounting) in network security?

• Only to verify user identity

• To manage user access, permissions, and track usage

• To configure network routers

• To establish secure VPN connections

What is the main function of a RADIUS server in a AAA framework?

• Encrypting user passwords

• Managing user authentication

• Providing network access control

• Monitoring network traffic

Which AAA component is responsible for tracking user activities and resource usage?

• Authentication

• Authorization

• Accounting

• Access Control

How does TACACS+ differ from RADIUS in terms of authentication?

• TACACS+ uses UDP, while RADIUS uses TCP

• TACACS+ separates authentication and authorization, RADIUS combines them

• TACACS+ is an open standard, RADIUS is proprietary

• TACACS+ does not support encryption, RADIUS does

In RADIUS server configuration mode, which command is used to set the timeout for communication with the server?

• radius-server timeout

• server timeout

• timeout radius-server

• radius-server host timeout

Which AAA component verifies the identity of a user by prompting for a username and password?

• Authentication

• Authorization

• Accounting

• Access Control

What information does the AAA Accounting phase typically record?

• User credentials

• Session start and stop times

• Access permissions

• Encryption keys

Which command is used to specify the maximum number of authentication attempts before declaring a failure in the AAA process?

• aaa authentication attempts

• authentication max-attempts

• aaa authentication login max-attempts

• login authentication max-retries

What transport protocol is primarily used by TACACS+ and commonly utilized by RADIUS for their communications?

• Both TACACS+ and RADIUS use TCP.

• UDP for TACACS+ and TCP for RADIUS.

• Both TACACS+ and RADIUS use UDP.

• TCP for TACACS+ and UDP for RADIUS.

What is the purpose of the AAA Authorization phase?

• To verify user credentials

• To track user activities

• To grant or deny access based on user permissions

• To encrypt communication between devices