350-701 · Question #606
Which feature is used in a push model to allow for session identification host reauthentication and session termination?
The correct answer is A. CoA request. A Change of Authorization (CoA) request is a feature in a push model that allows an AAA server (like Cisco ISE) to dynamically modify or terminate an authenticated user's session without requiring reauthentication.
Question
Which feature is used in a push model to allow for session identification host reauthentication and session termination?
Options
- ACoA request
- Bcarrier-grade NAT
- CAAA attributes
- DAV pair
How the community answered
(41 responses)- A90% (37)
- B2% (1)
- C2% (1)
- D5% (2)
Why each option
A Change of Authorization (CoA) request is a feature in a push model that allows an AAA server (like Cisco ISE) to dynamically modify or terminate an authenticated user's session without requiring reauthentication.
A Change of Authorization (CoA) request is a RADIUS message sent by an Authentication, Authorization, and Accounting (AAA) server to a network access device (e.g., a switch). It allows the AAA server to dynamically change a client's authorization, re-authenticate a host, or terminate a session (disconnect a user) in a 'push' manner without waiting for the client to initiate a new authentication.
Carrier-grade NAT (CGN) is a large-scale NAT implementation used by ISPs to conserve IPv4 addresses; it has no relation to session identification or reauthentication.
AAA attributes are parameters used within AAA protocols (like RADIUS or TACACS+) to convey information about the user, authentication method, or authorization policies; they are not a mechanism for dynamically pushing session changes.
An AV pair (Attribute-Value pair) is a fundamental data structure used within AAA attributes to define specific characteristics or policies, but it is not a feature for dynamic session management in a push model.
Concept tested: RADIUS Change of Authorization (CoA)
Source: https://www.cisco.com/c/en/us/td/docs/ios/security/secure_access/configuration/guide/sec_secure_access_cg_ios_xe/sec_tacacs_coarequest.html
Topics
Community Discussion
No community discussion yet for this question.