Exam 300-410 All QuestionsBrowse all questions from this exam
Go to Exam
Question 156

Refer to the exhibit.

A network administrator is trying to access a branch router using TACACS+ username and password credentials, but the administrator cannot log in to the router because the WAN connectivity is down. The branch router has following AAA configuration: aaa new-model aaa authorization commands 15 default group tacacs+ aaa accounting commands 1 default stop-only group tacacs+ aaa accounting commands 15 default stop-only group tacacs+ tacacs-server host 10.100.50.99 tacacs-server key Ci$co123

Which command will resolve this problem when WAN connectivity is down?

    Correct Answer: B

    To resolve the problem of the network administrator being unable to log in to the branch router due to WAN connectivity issues, the command should provide a fallback authentication method when TACACS+ is unavailable. The command 'aaa authentication login default group tacacs+ local' configures the router to try TACACS+ first, and if it fails, to use the local database for authentication. This allows for local login even when the WAN link is down, ensuring access to the router.

Discussion
bogdOption: B

aaa new-model aaa authorization commands 15 default group tacacs+ aaa accounting commands 1 default stop-only group tacacs+ aaa accounting commands 15 default stop-only group tacacs+ tacacs-server host 10.100.50.99 tacacs-server key Ci$co123 Both B and C would work (we do not see the rest of the config, we do not know whether users or enable secrets are configured)

HuntkeyOption: B

I just don't know how it would work when the WAN is up without the "aaa authentication login" configuration. Does it by default uses TACACS for authentication?

HungarianDish

probably, this is already configured "aaa authentication login default group tacacs+"

GreatDaneOption: B

If the TACACS+ server is unavailable, the only way to log on to the router is to enable local authentication. A. aaa authentication login console group tacacs+ enable Wrong answer. B. aaa authentication login default group tacacs+ local Correct answer. C. aaa authentication login default group tacacs+ enable Wrong answer. D. aaa authentication login default group tacacs+ console Wrong answer.

SeMo0o0o0Option: B

B is correct