nerdexam
Cisco

350-701 · Question #901

Drag and Drop Question An engineer must configure a Cisco switch to use a RADIUS server for AAA to meet these requirements: - Use Cisco123! as an encryption key. - Be located at an IP address of…

The correct answer is Switch# configure terminal; Switch(config)# radius server Radius; Switch(config-radius-server)# address ipv4 10.10.10.1 auth-port 1645 acct-port 1646; Switch(config-radius-server)# key Cisco123! The correct sequence follows Cisco IOS hierarchical configuration logic: you must first enter global configuration mode with 'configure terminal', then create and name the RADIUS server instance with 'radius server Radius' (which drops you into config-radius-server submode)…

Submitted by zhang_li· Mar 30, 2026Configure and verify AAA authentication using RADIUS on Cisco IOS devices - maps to CCNA Security / ENCOR (350-401) Security domain or CCNA (200-301) Security Fundamentals

Question

Drag and Drop Question An engineer must configure a Cisco switch to use a RADIUS server for AAA to meet these requirements: - Use Cisco123! as an encryption key. - Be located at an IP address of 10.10.t 10.1. - Use authentication port 1645 and authorization port 1646. Drag and drop the commands from the left into the sequence on the right to complete the configuration. Answer:

Exhibit

350-701 question #901 exhibit

Answer Area

Drag items

Switch(config-radius-server)# address ipv4 10.10.10.1 auth-port 1645 acct-port 1646Switch(config)# radius server RadiusSwitch# configure terminalSwitch(config-radius-server)# key Cisco123!

Correct arrangement

  • Switch# configure terminal
  • Switch(config)# radius server Radius
  • Switch(config-radius-server)# address ipv4 10.10.10.1 auth-port 1645 acct-port 1646
  • Switch(config-radius-server)# key Cisco123!

Explanation

The correct sequence follows Cisco IOS hierarchical configuration logic: you must first enter global configuration mode with 'configure terminal', then create and name the RADIUS server instance with 'radius server Radius' (which drops you into config-radius-server submode), and only then can you configure the server's IP address/ports and encryption key within that submode. The 'address' and 'key' commands are submode commands that cannot be executed before the RADIUS server instance is created, and the IP/port definition logically precedes the key assignment as best practice.

Topics

#AAA Configuration#RADIUS#Cisco IOS CLI#Network Security

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice