Exam 350-401 topic 1 question 283 discussion

The correct answer is: priority 1: AAA servers of ACE group priority 2: AAA servers of AAA_RADIUS group priority 3: local configured username in case-sensitive format priority 4: If no method works, then deny login

1.AAA ISE 2.AAA Radius 3.Local sensitive case 4.deny if nothing works

I agree with xziomal9 priority 1: AAA servers of ACE group priority 2: AAA servers of AAA_RADIUS group priority 3: local configured username in case-sensitive format priority 4: If no method works, then deny login

the correct answer is: ACE group > AAA_RADIUS > local-case if non of them works then it will deny access

Damn! the given answer is so out of the field... AAA ACE Grp AAA AAA_RADIUS grp Local case sensitive deny login

I hate this answer given. all dumps sites shows the same answer as examtopics. as far as im concerned, it should be: priority 1: AAA servers of ACE group (cannot assume AC has tacacs) priority 2: AAA servers of AAA_RADIUS group (cannot assume radius group name has only radius servers priority 3: local configured username in case-sensitive format (3rd option in aaa line will be the third priority, case = case sensitive) priority 4: If no method works, then deny login (last option, if blank is to deny) unless someone can come up with good logic, otherwise, im sticking to my answer. i thought maybe there was some tacacs versus radius priority if they were a part of the same group, but that's not possible, as groups need keyword "radius', or 'tacacs' specified.

groups are configured as either a radius or tacacs type: aaa group server tacacs+ MyTacGrpName aaa group server radius MyRadGrpName so you cannot assume ACE is a Tac groups. that rules out that option. also last option is always deny if all methods fail. Lastly, WTF on the word priority. does Priority 1 mean the first (highest) priority, or does priority 4 mean the highest (first) priority. I would assume the P1 = try first. In this case, i would go with: priority 1: AAA servers of ACE group priority 2: AAA servers of AAA_RADIUS group priority 3: local configured username in case-sensitive format priority 4: If no method works, then deny login Other dump sites appear to get this wrong too, so im questioning my logic now.

"The "local-case" method is used to enforce the typed username to be case sensitive, but in the case of the "local" method the you could type the username in upper or lower case and the Cisco device will accept it. Imagine that you have the "admin" local user, if the you want to login to the device and the method applied is "local" you could login with the "ADMIN" variant of the user and the router/switch will normally accept it, that doesn't happens if the "local-case" keyword is in the AAA policy, so you will have to type the exact username in "admin" in this case." https://learningnetwork.cisco.com/s/question/0D53i00000KstF1CAJ/ppp-chap-authentication-local-vs-localcase

local: case insensitive for username local-case: case sensitive for username

group ACE group AAA_RADIUS local-case deny

Given answer is correct

The aaa new-model command immediately applies local authentication to all lines and interfaces (except console line line con 0). so first the local configuration will apply. https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/10384-security.html

Broken question

and the local-case is the 1st method not the last!!

This seems wrong. The local work is missing from the list and who says that group has TACAS servers??