Implementing Cisco Network Security (IINS, legacy) — Question 50

Which statement about Cisco ACS authentication and authorization is true?

Answer options

• A. ACS can query multiple Active Directory domains
• B. ACS servers can be clustered to provide scalability
• C. ACS can use only one authorization profile to allow or deny requests

Correct answer: A, C, S, T, A, C, A, C, S

Explanation

The correct answer is A because Cisco ACS supports querying multiple Active Directory domains for authentication. Option B is incorrect as while ACS servers can be clustered, it is not directly related to authentication and authorization. Option C is wrong because ACS can use multiple authorization profiles, not just one.