Security

ENCOR · 5 questions

• A city hardens router management access so remote administrators must use SSH on the VTY lines, with authentication against locally configured usernames if the AAA servers are unreachable. Which approach best matches that intent?
• Court switch audits find the console line still permits unauthenticated access, so anyone with physical access can enter privileged configuration. What change correctly addresses that finding?
• Airport network admins must authenticate to network devices using a central TACACS+ server, yet still log in during WAN outages that isolate the AAA servers. Which AAA authentication pattern fits?
• Police command wants TACACS+ to control which administrators may enter configuration mode commands that change ACLs, rather than only verifying passwords at login. Which AAA function provides that command control?
• A library creates local usernames so helpdesk staff can run show commands while only network admins receive higher privilege for configuration. What concept does that local-user design illustrate?