nerdexam
Cisco

300-620 · Question #99

A customer implements RBAC on a Cisco APIC using a Windows RADIUS server that is configured with network control policies. The APIC is as follows: - Tenant = TenantX - Security Domain = Tenantx-SD…

The correct answer is D. shell:domains = TenantX-SD/tenant-admin/,common//read-all. x/Security_config/b_Cisco_APIC_Security_Guide/b_Cisco_APIC_Security_Guide_chapter_0100.

ACI Management

Question

A customer implements RBAC on a Cisco APIC using a Windows RADIUS server that is configured with network control policies. The APIC is as follows:

  • Tenant = TenantX
  • Security Domain = Tenantx-SD
  • User = X

The customer requires User X to have access to TenantX only, without any extra privilege in the Cisco ACI fabric domain. Which Cisco AV pair must be implemented on the RADIUS server to meet these requirement?

Exhibit

300-620 question #99 exhibit

Options

  • Ashell:domains = TenantX-SD/fabric-admin/,common//read-all
  • Bshell:domains = TenantX-SD/tenant-admin
  • Cshell:domains = TenantX-SD/tenant-ext-admin/,common//read-all
  • Dshell:domains = TenantX-SD/tenant-admin/,common//read-all

How the community answered

(20 responses)
  • A
    10% (2)
  • C
    15% (3)
  • D
    75% (15)

Explanation

x/Security_config/b_Cisco_APIC_Security_Guide/b_Cisco_APIC_Security_Guide_chapter_0100.

Topics

#RBAC#RADIUS#AV-pair#Security domains

Community Discussion

No community discussion yet for this question.

Full 300-620 Practice