Exam 300-410 topic 1 question 156 discussion

Actual exam question from Cisco's 300-410

Question #: 156
Topic #: 1

Refer to the exhibit.

A network administrator is trying to access a branch router using TACACS+ username and password credentials, but the administrator cannot log in to the router because the WAN connectivity is down. The branch router has following AAA configuration: aaa new-model aaa authorization commands 15 default group tacacs+ aaa accounting commands 1 default stop-only group tacacs+ aaa accounting commands 15 default stop-only group tacacs+ tacacs-server host 10.100.50.99 tacacs-server key Ci$co123
Which command will resolve this problem when WAN connectivity is down?

A. aaa authentication login console group tacacs+ enable
B. aaa authentication login default group tacacs+ local
C. aaa authentication login default group tacacs+ enable
D. aaa authentication login default group tacacs+ console

Show Suggested Answer

Suggested Answer: B 🗳️

by bogd at Feb. 22, 2022, 12:36 p.m.

Comments

Submit Cancel

bogd

Highly Voted 3 years, 3 months ago

Selected Answer: B

aaa new-model aaa authorization commands 15 default group tacacs+ aaa accounting commands 1 default stop-only group tacacs+ aaa accounting commands 15 default stop-only group tacacs+ tacacs-server host 10.100.50.99 tacacs-server key Ci$co123 Both B and C would work (we do not see the rest of the config, we do not know whether users or enable secrets are configured)

upvoted 10 times

...

[Removed]

Most Recent 10 months, 1 week ago

Selected Answer: B

B is correct

upvoted 1 times

...

Huntkey

2 years, 7 months ago

I just don't know how it would work when the WAN is up without the "aaa authentication login" configuration. Does it by default uses TACACS for authentication?

upvoted 2 times

HungarianDish_111

1 year, 11 months ago

probably, this is already configured "aaa authentication login default group tacacs+"

upvoted 2 times

...

[Removed]

2 years, 10 months ago

If the TACACS+ server is unavailable, the only way to log on to the router is to enable local authentication. A. aaa authentication login console group tacacs+ enable Wrong answer. B. aaa authentication login default group tacacs+ local Correct answer. C. aaa authentication login default group tacacs+ enable Wrong answer. D. aaa authentication login default group tacacs+ console Wrong answer.

upvoted 2 times

...