350-401 Question 278

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  The 'group' keyword is only used when referencing a server group. The authentication list did not include a fallback method for authentication (a fallback method in this case would be a RADIUS server or the local directory). As an example of using redundancy in authentication: 'aaa authentication login default tacacs+ local'. This command creates an authentication list named default that uses a TACACS+ server as the primary method for authentication and the local directory as a secondary method if the primary method fails.

• 1

  Applied configuration has invalid syntax: suppose to type "group" before specifying RADIUS or TACACS+ when creating an authentication method aaa authentication login authorizationlist ? cache Use Cached-group enable Use enable password for authentication. group Use Server-group krb5 Use Kerberos 5 authentication. krb5-telnet Allow logins only if already authenticated via Kerberos V Telnet. line Use line password for authentication. local Use local username authentication. local-case Use case-sensitive local username authentication. none NO authentication. passwd-expiry enable the login list to provide password aging support

• Chose B1

  B is correct. Due to what I wrote below.