Exam 350-601 topic 1 question 276 discussion

Actual exam question from Cisco's 350-601

Question #: 276
Topic #: 1

A company provides applications and database hosting services to multiple customers using isolated infrastructure-as-a-service services within the same data center environment. The environment is based on Cisco MDS 9000 Series Switches. The requirement is to manage the environment by using Fibre Channel
Security Protocol and to enable user authentication when the centralized AAA server is unreachable. All communication between the MDS switches and the remote servers must be encrypted. Which command set must be used to meet these requirements?

A. aaa group server radius RadiusServer1 aaa authentication login default RadiusServer1
B. aaa group server tacacs+ TacacsServer1 aaa authentication dhchap default group TacacsServer1
C. aaa group server radius RadiusServer1 aaa authentication dhchap default group RadiusServer1
D. aaa group server tacacs+ TacacsServer1 aaa authentication login console TacacsServer1

Show Suggested Answer

Suggested Answer: B 🗳️

by cypher9 at May 4, 2022, 9:40 a.m.

Comments

Submit Cancel

mauchi

Highly Voted 1 year, 3 months ago

Selected Answer: B

It has to be B. FC-SP uses DHCHAP protocol for authenticating authentication between MDS9000 and other devices could potencially use both tacacs and radius. However, bcs it tells us all communication between them should be encrypted, only TACACS provides full AAA encryption. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/8_x/config/security/cisco_mds9000_security_config_guide_8x/configuring_fcsp_dhchap.html#con_1247118

upvoted 7 times

cypher9

1 year, 2 months ago

Cheers

upvoted 1 times

...

GuyThatTakesDumps

Most Recent 10 months, 2 weeks ago

Selected Answer: B

b is the one

upvoted 2 times

...

cypher9

1 year, 3 months ago

any reference for this? Why is it not A or C?

upvoted 1 times

cypher9

1 year, 3 months ago

I mean A or B?

upvoted 1 times

Annielover007

9 months, 1 week ago

RADIUS only encrypts the password, whereas with TACACS, all communications are encrypted. Also, DHCHAP is the protocol used if using FC-SP (fibre-channel security protocol) is required. Therefore, B is correct.

upvoted 3 times

...