A county IT team wants switch administrators to authenticate with individual accounts and centralized authorization instead of shared local passwords. Which approach meets that goal?
Select an answer to reveal the explanation.
Short Explanation
Shared enable passwords are like one house key under the mat. AAA sends each admin’s badge to a central desk (RADIUS/TACACS+) for login, privileges, and an audit trail.
Full Explanation
AAA centralizes device-administration authentication, authorization, and accounting, typically via TACACS+ or RADIUS, retiring shared local credentials while retaining controlled local fallback. Console-only shared secrets, DHCP snooping, and storm control do not provide individualized admin AAA. CCIE EI expects this device-security pattern on IOS XE switches and routers without making ISE product configuration the exam core.