Implementing Cisco Application Centric Infrastructure (DCACI) — Question 195

A Cisco APIC is configured with RADIUS authentication as the default. The network administrator must ensure that users can access the APIC GUI with a local account if the RADIUS server is unreachable. Which action must be taken to accomplish this goal?

Answer options

• A. Associate console authentication with the “RADIUS” realm
• B. Reference the “local” realm in the fallback domain
• C. Create an additional login domain that references local accounts
• D. Enable the fallback check with the default authentication domain

Correct answer: C

Explanation

The correct answer is C because creating an additional login domain that references local accounts allows users to authenticate locally if RADIUS fails. Options A and B do not provide a mechanism for local fallback, and D does not specify that it is targeting local accounts, thus failing to ensure local access in the absence of RADIUS.