Drag and Drop Question Refer to the exhibit. An engineer must configure a Cisco switch to use a TACACS+ server at IP address 20.20.20.1 with key Cisco123! for all Telnet connections. The…

Submitted by packet_pusher· Mar 30, 2026Infrastructure Security - Configure and verify device access control using AAA with TACACS+ for network device management (CCNA/CCNP Security Domain: Implementing Secure Network Access)

Question

Drag and Drop Question Refer to the exhibit. An engineer must configure a Cisco switch to use a TACACS+ server at IP address 20.20.20.1 with key Cisco123! for all Telnet connections. The configuration in the exhibit was applied to the switch already. Drag and drop the commands from the left into the sequence on the right to complete the configuration. Answer:

Exhibit

Answer Area

Drag items

Switch(config)# aaa new modelSwitch(config)# aaa authentication login default tacacs+ localSwitch(config)# line vty 0 15Switch(config-line)# login authentication default

Explanation

The correct sequence builds AAA authentication step by step: first 'aaa new-model' enables AAA on the switch (prerequisite for all AAA commands), then 'aaa authentication login default tacacs+ local' defines the default login method list using TACACS+ as primary and local as fallback, next 'line vty 0 15' enters the VTY line configuration mode for Telnet/SSH sessions, and finally 'login authentication default' applies the default AAA method list to those VTY lines. Since the exhibit already shows the TACACS+ server IP and key configured (tacacs-server host 20.20.20.1 key Cisco123!), these four commands complete the configuration in the correct dependency order.

Topics

#AAA#TACACS+#Switch Security#VTY Line Configuration

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice