Huawei Certified Network Associate – Routing and Switching (HCNA-RS, legacy) — Question 130

A user accesses a server supporting AAA, for which the authorization mode on the AAA server has been configured using the command "authorization-mode hwtacacs if-authenticated".
Which of the following statements regarding this command are true? (Choose three).

Answer options

• A. If the hwtacacs server fails to respond, the user will be authenticated using local authentication.
• B. If the hwtacacs server fails to respond, the user will be authenticated using remote authentication.
• C. If the hwtacacs server fails to respond, the user will bypass authentication.
• D. The hwtacacs server will authorize the user.

Correct answer: A, B, D

Explanation

The correct option A is true because local authentication serves as a fallback when the hwtacacs server is unresponsive. Option B is incorrect because local authentication, not remote, is the fallback. Option C is wrong as authentication is not bypassed; the system defaults to local authentication. Option D is correct since the hwtacacs server is responsible for authorizing the user.