Match each access-control concept to its most accurate meaning.

Technical deep dive

How to think about this question

Access control in Cisco networking fundamentally involves verifying who is requesting access and what they are allowed to do. Authentication is the process that confirms the identity of a user or device, typically through credentials like usernames and passwords. Authorization follows authentication by determining the specific resources or actions the authenticated entity is permitted to access or perform. Least privilege is a security principle that restricts access rights to the minimum necessary, reducing potential damage from compromised accounts or errors. The local database is a method of storing user credentials directly on the network device, enabling local authentication without relying on external servers. In Cisco devices, authentication is the first gatekeeper step, often implemented via protocols like AAA (Authentication, Authorization, and Accounting). Once identity is confirmed, authorization policies decide the level of access granted, such as command privileges or network resource availability. Least privilege enforces strict access controls, ensuring users or processes only have permissions essential for their roles, which helps contain security risks. The local database stores usernames and passwords on the device itself, which is useful for small deployments or fallback scenarios but less scalable than centralized authentication servers like RADIUS or TACACS+. A frequent exam pitfall is conflating these related but distinct concepts. For example, assuming authorization includes identity verification or that least privilege is a form of authentication leads to incorrect answers. Practically, network administrators must clearly separate these functions to design secure access policies. Using a local database for authentication is straightforward but less flexible, so understanding when and why to use it versus external servers is critical for Cisco network security management.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask