Implementing Cisco Network Security (IINS, legacy) — Question 107

If a router configuration includes the line aaa authentication login default group tacacs+ enable, which events will occur when the TACACS+ server returns an error? (Choose two)

Answer options

• A. Authentication will use the router's local database
• B. The use will be prompted to authenticate using the enable password
• C. Authentication attempts will be sent to the TACACS+ server

Correct answer:

Explanation

The correct answers are A and B. When the TACACS+ server returns an error, the system will fall back on the local user database for authentication (A), and the user may also be prompted for the enable password (B). Option C is incorrect because if the TACACS+ server fails, authentication attempts will not continue to be sent to it.