Implementing and Operating Cisco Data Center Core Technologies (DCCOR) — Question 175
An engineer must apply AAA configuration on a Cisco MDS 9000 Series Switch. The solution must meet these conditions:
✑ It must use a challenge-response authentication protocol that uses MD5 hashing with an incrementally changing identifier.
✑ The RADIUS configuration must be automatically shared with other MDS switches in the environment.
The RADIUS server is already defined. Which command set completes the configuration?
Answer options
- A. aaa authentication login chap enable radius distribute radius commit
- B. aaa authentication login pap enable distribute radius radius-server host 10.8.8.0 auth-port 1821
- C. aaa authentication login mschapv2 enable radius propagate radius authentication port 1821
- D. aaa authentication login mschap enable radius commit radius-server host 10.8.8.0
Correct answer: A
Explanation
The correct answer is A because it specifies the use of CHAP for authentication, which meets the requirement for a challenge-response protocol with MD5 hashing. The other options either use different authentication methods (like PAP or MSCHAP) or do not properly address the need for distributed RADIUS configuration.