Exam 300-430 topic 1 question 122 discussion

Actual exam question from Cisco's 300-430

Question #: 122
Topic #: 1

A wireless engineer must configure access control on a WLC using a TACACS+ server for a company that is implementing centralized authentication on network devices. Which role value must be configured under the shell profile on the TACACS+ server for a user with read-only permissions?

A. ADMIN
B. MANAGEMENT
C. MONITOR
D. READ

Show Suggested Answer

Suggested Answer: C 🗳️

by KalRona at Oct. 28, 2021, 4:35 p.m.

Comments

Submit Cancel

Vlad_Is_Love_ua

10 months ago

Selected Answer: C

The minimum TACACS+ authorization level is MONITOR only, which is equivalent to read-only access in RADIUS. The maximum level is ALL, which authorizes an administrator with super-user privileges to execute configuration changes across the entire controller (both at the CLI and web interface)

upvoted 1 times

...

KalRona

2 years, 6 months ago

C. MONITOR is correct Usage: In order to grant the user read-only access, the <username> value must be set to monitor. In order to grant the user read-write access https://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/115926-tacacs-radius-devices-00.html

upvoted 3 times

KalRona

2 years, 6 months ago

Edit: Usage: In order to grant the user read-only access, the <username> value must be set to monitor. In order to grant the user read-write access, the <username> value must be set to admin.

upvoted 1 times

...