Home » Cisco » 350-080 » Which two statements about authentication settings for DCNM-LAN are true?
Which two statements about authentication settings for DCNM-LAN are true? (Choose two.)
A. If none of the authentication servers that are configured for the current authentication mode responds to an authentication request, the DCNM-LAN server falls back to local authentication.
B. DCNM-LAN only supports TACACS+.
C. Each DCNM-LAN server will have the same device credentials.
D. Administering DCNM-LAN authentication settings require an authentication license.
E. DCNM-LAN server users are local to the DCNM-LAN server.
Correct Answer: AE
Explanation/Reference:
Explanation:
Local authentication always is the fallback method for RADIUS and TACACS+ authentication modes. If none of the servers configured for the current authentication mode is available, the DCNM-LAN server uses the local database to authenticate login requests. This behavior is designed to help you prevent accidental lockout from DCNM-LAN.
For users who need fallback support, the usernames of their local user accounts must be identical to their usernames on the authentication servers. Also, we recommend that their passwords in the local user accounts should be identical to their passwords on the authentication servers in order to provide transparent fallback support. Because the user cannot determine whether an authentication server or the local database is providing the authentication service, using usernames and passwords on authentication servers that are different than the usernames and passwords in the local database means that the user cannot be certain which username and password should be given.
Reference: http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/7_x/dcnm/Fundamentals_Guide/fund_hd/DCNM_Fundamentals/ fund_svr_aaa.html#pgfId-1424519
