300-410 Exam QuestionsBrowse all questions from this exam
Go to Exam

300-410 Exam - Question 156

Refer to the exhibit.

A network administrator is trying to access a branch router using TACACS+ username and password credentials, but the administrator cannot log in to the router because the WAN connectivity is down. The branch router has following AAA configuration: aaa new-model aaa authorization commands 15 default group tacacs+ aaa accounting commands 1 default stop-only group tacacs+ aaa accounting commands 15 default stop-only group tacacs+ tacacs-server host 10.100.50.99 tacacs-server key Ci$co123

Which command will resolve this problem when WAN connectivity is down?

Show Answer
Correct Answer: B

To resolve the problem of the network administrator being unable to log in to the branch router due to WAN connectivity issues, the command should provide a fallback authentication method when TACACS+ is unavailable. The command 'aaa authentication login default group tacacs+ local' configures the router to try TACACS+ first, and if it fails, to use the local database for authentication. This allows for local login even when the WAN link is down, ensuring access to the router.

Discussion

4 comments
Sign in to comment
bogdOption: B
Feb 22, 2022

aaa new-model aaa authorization commands 15 default group tacacs+ aaa accounting commands 1 default stop-only group tacacs+ aaa accounting commands 15 default stop-only group tacacs+ tacacs-server host 10.100.50.99 tacacs-server key Ci$co123 Both B and C would work (we do not see the rest of the config, we do not know whether users or enable secrets are configured)

GreatDaneOption: B
Jul 28, 2022

If the TACACS+ server is unavailable, the only way to log on to the router is to enable local authentication. A. aaa authentication login console group tacacs+ enable Wrong answer. B. aaa authentication login default group tacacs+ local Correct answer. C. aaa authentication login default group tacacs+ enable Wrong answer. D. aaa authentication login default group tacacs+ console Wrong answer.

HuntkeyOption: B
Oct 15, 2022

I just don't know how it would work when the WAN is up without the "aaa authentication login" configuration. Does it by default uses TACACS for authentication?

HungarianDish
May 31, 2023

probably, this is already configured "aaa authentication login default group tacacs+"

SeMo0o0o0Option: B
Jul 19, 2024

B is correct