AAA
What does AAA stand for in network security?
Authentication, Authorization, and Accounting
What part of AAA verifies that a user or device is who they claim to be?
Authentication
What AAA protocol is preferred for network device administration because it supports per-command authorization?
TACACS+
What AAA protocol is commonly used for 802.1X, wireless access, VPN access, and web authentication?
RADIUS
A fingerprint reader uses which category of authentication factor?
Biometric authentication
What part of AAA determines what an authenticated user is allowed to access or do?
Authorization
What does AAA accounting provide to administrators?
A record of logins, sessions, commands, and resource usage
What transport does TACACS+ use for reliable communication?
TCP port 49
What RADIUS message indicates that more information is needed before access is approved or denied?
Access-Challenge
What authentication factor is represented by a password, passphrase, or PIN?
Something you know
What command enables the AAA feature set on a Cisco router or switch?
aaa new-model
What access control approach can consider job title, clearance, device status, location, or time of day?
ABAC
What two devices make up the TACACS+ Architecture?
TACACS+ Client and TACACS+ Server
What ports are commonly used by RADIUS for authentication and accounting?
UDP 1812 and UDP 1813
What authentication factor is represented by a smartcard, CAC, hardware token, or mobile authenticator app?
Something you have
In a tactical network without reliable access to Cisco ISE, what authentication source is commonly used?
Local user database
What access control model uses user, resource, and environmental attributes to make access decisions?
Attribute-Based Access Control
What TACACS+ feature allows flexible policy decisions for login, command use, and logging?
AAA functions are handled in separate transactions
How does traditional RADIUS encryption differ from TACACS+?
RADIUS encrypts only the User-Password attribute
What does a unique salt help defend against when storing passwords?
Duplicate hashes and precomputed hash attacks
What network component commonly forwards AAA requests from users to an AAA server?
Network Access Server
Why is local fallback important in both enterprise and tactical AAA configurations?
It gives administrators a recovery option when central AAA services are unavailable
What does TACACS stand for?
Terminal Access Controller Access-Control System
What does RADIUS stand for?
Remote Authentication Dial-In User System
Why are passwords normally stored as hashes instead of plain text?
Hashing turns the password into a one-way value that is difficult to reverse