Exam 350-601 topic 1 question 294 discussion

Actual exam question from Cisco's 350-601

Question #: 294
Topic #: 1

Refer to the exhibit. A user must be granted management access to the Cisco Nexus 9000 Series Switch using AAA servers. The RADIUS servers are configured to accept login requests from the same Layer 2 subnet of the switch. The user must be permitted to log in with these requirements:
✑ RADIUS server 1 must be used to log in via a console.
✑ RADIUS server 2 must be used to login via SSH.
Which two actions meet these requirements? (Choose two.)

A. Configure the authentication login to use group RAD1 for console and group RAD2 for remote access.
B. Change the dead timer for RAD1 and RAD2 to 1 minute.
C. Set the RADIUS source interface to be mgmt0 for group RAD1 and VLAN 22 for group RAD2.
D. Configure AAA to send the accounting traffic to RAD1 and RAD2.
E. Enable command authorization to RAD1 and RAD2 for all successful logins.

Show Suggested Answer

Suggested Answer: AC 🗳️

by elmodude at Sept. 6, 2022, 5:46 p.m.

Comments

Submit Cancel

Reikidude00

1 month, 3 weeks ago

Selected Answer: A

it not make any sense...mgmt is not console

upvoted 1 times

...

iz_m6

6 months, 2 weeks ago

Selected Answer: AC

A and C as well.

upvoted 1 times

...

C4rlos

2 years ago

Selected Answer: AC

A and C

upvoted 1 times

...

GuyThatTakesDumps

2 years, 2 months ago

Selected Answer: AC

A and C

upvoted 1 times

...

7korn7

2 years, 2 months ago

Selected Answer: AC

Configure the authentication login to use group RAD1 for console and group RAD2 for remote access. Set the RADIUS source interface to be mgmt0 for group RAD1 and VLAN 22 for group RAD2. Command authorization is only supported with tacacs+. E is incorrect.

upvoted 2 times

...

elmodude

2 years, 3 months ago

Selected Answer: AC

Need to source you interface for each group. We'll at least for RAD1 as it's using the mgmt VRF.

upvoted 3 times

...