350-701 · Question #839
A security engineer is tasked with configuring TACACS on a Cisco ASA firewall. The engineer must be able to access the firewall command line interface remotely. The authentication must fall back to…
The correct answer is A. aaa authentication ssh console TACACS-GROUP LOCAL. To configure TACACS authentication for SSH access to the Cisco ASA firewall, the correct command is aaa authentication ssh console TACACS-GROUP LOCAL. This command specifies that SSH authentication will first attempt to use the TACACS-GROUP AAA server group and, if that fails…
Question
A security engineer is tasked with configuring TACACS on a Cisco ASA firewall. The engineer must be able to access the firewall command line interface remotely. The authentication must fall back to the local user database of the Cisco ASA firewall. AAA server group named TACACS- GROUP is already configured with TACACS server IP address 192.168.10.10 and key C1sc0498484779!. Which configuration must be done next to meet the requirement?
Options
- Aaaa authentication ssh console TACACS-GROUP LOCAL
- Baaa authentication http console TACACS-GROUP LOCAL
- Caaa authentication serial console LOCAL TACACS-GROUP
- Daaa authentication ssh console LOCAL TACACS-GROUP
How the community answered
(55 responses)- A85% (47)
- B4% (2)
- C2% (1)
- D9% (5)
Explanation
To configure TACACS authentication for SSH access to the Cisco ASA firewall, the correct command is aaa authentication ssh console TACACS-GROUP LOCAL. This command specifies that SSH authentication will first attempt to use the TACACS-GROUP AAA server group and, if that fails, it will fall back to the local user database.
Topics
Community Discussion
No community discussion yet for this question.