Exam 300-620 topic 1 question 127 discussion

Actual exam question from Cisco's 300-620

Question #: 127
Topic #: 1

A Cisco APIC is configured with RADIUS authentication as the default. The network administrator must ensure that users can access the APIC GUI with a local account if the RADIUS server is unreachable. Which action must be taken to accomplish this goal?

A. Associate console authentication with the “RADIUS” realm
B. Reference the “local” realm in the fallback domain
C. Create an additional login domain that references local accounts
D. Enable the fallback check with the default authentication domain

Show Suggested Answer

Suggested Answer: C 🗳️

by sailorsoul at Jan. 28, 2024, 7:01 p.m.

Comments

Submit Cancel

sailorsoul

Highly Voted 11 months, 1 week ago

Selected Answer: C

Horrible question from Cisco again, both B & C will work. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/b_KB_ACI-TACACS-config.html But in the document, it says best practice is to create another local domain.

upvoted 5 times

...

prospio971

Most Recent 4 months, 3 weeks ago

Selected Answer: D

In Cisco ACI, you can configure fallback authentication to allow local user access in case the primary authentication method (such as RADIUS) is unreachable. To enable this feature, you need to configure the APIC to fallback to the local authentication domain if the RADIUS server is not available. By enabling fallback authentication, when the APIC cannot reach the RADIUS server, it will automatically check local user credentials as a fallback.

upvoted 1 times

...

2eb1ea8

5 months, 1 week ago

Selected Answer: B

Allow access with a local account (if the RADIUS server is unreachable). If we create an additional login domain that references local accounts it will give any user the possibility to choose to login with local credentials even if the RADIUS server is reachable.

upvoted 2 times

...