Which information is contained in a AAA authentication method list?（）A、A pointer to the address where a RADIUS server can be locatedB、A sequential list of user authentication methodsC、A description of what a user can execute on a routerD、The setup for the

题目

Which information is contained in a AAA authentication method list?（）

  • A、A pointer to the address where a RADIUS server can be located
  • B、A sequential list of user authentication methods
  • C、A description of what a user can execute on a router
  • D、The setup for the authentication phase on a router
相似考题

1.Which two statements regarding firewall user authentication client groups are true?() (Choose two.)A. A client group is a list of clients associated with a group.B. A client group is a list of groups associated with a client.C. Client groups are referenced in security policy in the same manner in which individual clients are referenced.D. Client groups are used to simplify configuration by enabling firewall user authentication without security policy.

2.How can you control which local IP address the ERX uses when communicating with a RADIUS server?()A. radius update-source-addressB. radius calling-station-formatC. radius accounting server 10.13.7.55D. radius authentication server 10.13.7.55

3.Which two statements regarding firewall user authentication client groups are true?（） (Choose two.)A、A client group is a list of clients associated with a group.B、A client group is a list of groups associated with a client.C、Client groups are referenced in security policy in the same manner in which individual clients are referenced.D、Client groups are used to simplify configuration by enabling firewall user authentication without security policy.

4.What is a function of a user role?()A. It defines the IPsec parameters for the role.B. It assigns access to resources.C. It associates the user with a RADIUS server.D. It defines the types of authentication methods available to the user

更多“Which information is contained in a AAA authentication method list?（）A、A pointer to the address where a RADIUS server can be locatedB、A sequential list of user authentication methodsC、A description of what a user can execute on a routerD、The setup for the”相关问题

  • 第1题：

    Which one of the following commands can be used to enable AAA authentication to determine if a user canaccess the privilege command level？（）

    • A、aaa authentication enable method default
    • B、aaa authentication enable default
    • C、aaa authentication enable level
    • D、aaa authentication enable default local

    正确答案:B

  • 第2题：

    Which two statements are correct about the aaa authentication login default grouptacacs+ localglobal configuration command？ （）

    • A、 this login authenticationmethod list is automaticallyapplied to all lines except those that have a named method list explicitly defined
    • B、 If the user fails the TACACS+ authentication then the local database on the router will be used to authenticatethe user
    • C、 if the tacacs+ server fails to respond then the local database on the router will be used to authenticate the user 
    • D、 "login" is the name of the method list being configured
    • E、 if the tacacs+ server is unavailable， authentication will succeed automaticallyby default

    正确答案:A,C

  • 第3题：

    What is a function of a user role?（）

    • A、It defines the IPsec parameters for the role.
    • B、It assigns access to resources.
    • C、It associates the user with a RADIUS server.
    • D、It defines the types of authentication methods available to the user

    正确答案:A

  • 第4题：

    What is the objective of the aaa authentication login console-in local command？（）

    • A、It specifies the login authentication method list named console-in using the local user database on the router
    • B、It specifies the login authorization method list named console-in using the local RADIUS username-password data base
    • C、It specifies the login authentication list named console-in using the local username- password data base on the router
    • D、It specifies the login authorization method list named console-in using the local username- password data base on the router

    正确答案:A

  • 第5题：

    In computer security， AAA stands for authentication， authorization and accounting. Which optionabout the AAA authentication enable default group radius enable command is correct？（）

    • A、If the radius server returns an error， the enable password will be used
    • B、If the radius server returns a ’failed’ message， the enable password will be used
    • C、The command login authentication group will associate the AM authentication to a specifiedinterface
    • D、If the group database is unavailable， the radius server will be used

    正确答案:A

  • 第6题：

    You have multiple realms configured on a MAG Series device. A user is authenticating with a non- Junos Pulse Access Control Service client. The username does not contain a realm suffix.Which behavior will the user experience?（）

    • A、The user will not be able to log-in, as the Junos Pulse Access Control Service device cannot map the user to a realm when the realm value is empty.
    • B、The user will be mapped to all realms available to the user.
    • C、The Junos Pulse Access Control Service device displays a page where the user must choose from a list of realms.
    • D、The endpoint is assigned to the first realm in the list whose authentication server is a match with the endpoints software.

    正确答案:D

  • 第7题：

    Which user authentication methods are available in JUNOS?（）

    • A、MD5 and SHA
    • B、RADIUS and TACACS only
    • C、Local User Database
    • D、Local user Database, RADIUS, and TACACS+

    正确答案:D

  • 第8题：

    多选题
    Which two statements are correct about the aaa authentication login default grouptacacs+ localglobal configuration command？ （）
    A

    this login authenticationmethod list is automaticallyapplied to all lines except those that have a named method list explicitly defined

    B

    If the user fails the TACACS+ authentication then the local database on the router will be used to authenticatethe user

    C

    if the tacacs+ server fails to respond then the local database on the router will be used to authenticate the user

    D

    login is the name of the method list being configured

    E

    if the tacacs+ server is unavailable， authentication will succeed automaticallyby default


    正确答案： C,A
    解析： 暂无解析

  • 第9题：

    单选题
    What is the objective of the aaa authentication login console-in local command？（）
    A

    It specifies the login authentication method list named console-in using the local user database on the router

    B

    It specifies the login authorization method list named console-in using the local RADIUS username-password data base

    C

    It specifies the login authentication list named console-in using the local username- password data base on the router

    D

    It specifies the login authorization method list named console-in using the local username- password data base on the router


    正确答案： C
    解析： 暂无解析

  • 第10题：

    单选题
    What is the S-Series Proxy Bypass List？（）
    A

    a list of proxy servers that are to be bypassed

    B

    a list of clients and destinations that will bypass the proxy in transparent mode

    C

    a list of clients and destinations that will bypass the proxy in explicit forward mode

    D

    a list of user agents exempt from authentication


    正确答案： A
    解析： 暂无解析

  • 第11题：

    单选题
    Which information is contained in a AAA authentication method list?（）
    A

    A pointer to the address where a RADIUS server can be located

    B

    A sequential list of user authentication methods

    C

    A description of what a user can execute on a router

    D

    The setup for the authentication phase on a router


    正确答案： A
    解析： 暂无解析

  • 第12题：

    单选题
    How can you control which local IP address the ERX uses when communicating with a RADIUS server?（）
    A

    radius update-source-address

    B

    radius calling-station-format

    C

    radius accounting server 10.13.7.55

    D

    radius authentication server 10.13.7.55


    正确答案： A
    解析： 暂无解析

  • 第13题：

    Which three configuration steps must be completed for a Cisco router in order to enable local AAA login authentication?（） (Choose three.)

    • A、Apply the method list to an interface
    • B、Specify the default method list and apply it to the interface
    • C、Enable AAA
    • D、Define a method list

    正确答案:A,C,D

  • 第14题：

    What is not a difference between VPN tunnel authentication and per-user authentication?（）

    • A、VPN tunnel authentication is part of the IKE specification. 
    • B、VPN tunnel authentication does not control which end user can use the IPSec SA (VPN tunnel).
    • C、User authentication is used to control access for a specific user ID, and can be used with or without a VPN tunnel for network access authorization. 
    • D、802.1X with EAP-TLS (X.509 certificates) can be used to authenticate an IPSec tunnel.

    正确答案:D

  • 第15题：

    How can you control which local IP address the ERX uses when communicating with a RADIUS server?（）

    • A、radius update-source-address
    • B、radius calling-station-format
    • C、radius accounting server 10.13.7.55
    • D、radius authentication server 10.13.7.55

    正确答案:A

  • 第16题：

    Which statement describes the Authentication Proxy feature？（）

    • A、All traffic is permitted from the inbound to the outbound interface upon successful authentication of the user.
    • B、A specific access profile is retrieved from a TACACS+ or RADIUS server and applied to an IOS Firewall based on user provided credentials.
    • C、Prior to responding to a proxy ARP，the router will prompt the user for a login and password which are authenticated based on the configured AAA policy.
    • D、The proxy server capabilities of the IOS Firewall are enabled upon successful authentication of the user.

    正确答案:B

  • 第17题：

    What is the S-Series Proxy Bypass List？（） 

    • A、a list of proxy servers that are to be bypassed
    • B、a list of clients and destinations that will bypass the proxy in transparent mode
    • C、a list of clients and destinations that will bypass the proxy in explicit forward mode
    • D、a list of user agents exempt from authentication

    正确答案:B

  • 第18题：

    Which two statements regarding external authentication servers for firewall user authentication are true?（） (Choose two.)

    • A、Up to three external authentication server types can be used simultaneously.
    • B、Only one external authentication server type can be used simultaneously.
    • C、If the local password database is not configured in the authentication order, and the configured authentication server  bypassed.
    • D、If the local password database is not configured in the authentication order, and the configured authentication server authentication is rejected.

    正确答案:B,D

  • 第19题：

    Which statement accurately describes firewall user authentication？（）

    • A、Firewall user authentication provides another layer of security in a network.
    • B、Firewall user authentication provides a means for accessing a JUNOS Software-based security device.
    • C、Firewall user authentication enables session-based forwarding.
    • D、Firewall user authentication is used as a last resort security method in a network.

    正确答案:A

  • 第20题：

    单选题
    Which one of the following commands can be used to enable AAA authentication to determine if a user canaccess the privilege command level？（）
    A

    aaa authentication enable method default

    B

    aaa authentication enable default

    C

    aaa authentication enable level

    D

    aaa authentication enable default local


    正确答案： C
    解析： 暂无解析

  • 第21题：

    单选题
    What is a function of a user role?（）
    A

    It defines the IPsec parameters for the role.

    B

    It assigns access to resources.

    C

    It associates the user with a RADIUS server.

    D

    It defines the types of authentication methods available to the user


    正确答案： A
    解析： 暂无解析

  • 第22题：

    单选题
    In computer security， AAA stands for authentication， authorization and accounting. Which optionabout the AAA authentication enable default group radius enable command is correct？（）
    A

    If the radius server returns an error， the enable password will be used

    B

    If the radius server returns a ’failed’ message， the enable password will be used

    C

    The command login authentication group will associate the AM authentication to a specifiedinterface

    D

    If the group database is unavailable， the radius server will be used


    正确答案： D
    解析： 暂无解析

  • 第23题：

    单选题
    What is not a difference between VPN tunnel authentication and per-user authentication?（）
    A

    VPN tunnel authentication is part of the IKE specification. 

    B

    VPN tunnel authentication does not control which end user can use the IPSec SA (VPN tunnel).

    C

    User authentication is used to control access for a specific user ID, and can be used with or without a VPN tunnel for network access authorization. 

    D

    802.1X with EAP-TLS (X.509 certificates) can be used to authenticate an IPSec tunnel.


    正确答案： A
    解析： 暂无解析

相关内容