Quick Answer

The answer is that the device uses the local database for authentication as the final fallback step. This is correct because the AAA method list defines an ordered sequence of authentication methods, and when a RADIUS server is unreachable, the device first attempts the primary RADIUS server, then any backup RADIUS servers in the list; only after all RADIUS servers fail does it fall back to the local database, ensuring redundancy without locking out administrators. On the ENCOR 350-401 exam, this concept tests your understanding of AAA method list fallback from RADIUS to local, often appearing as a drag-and-drop ordering task where the common trap is placing the local database before the backup RADIUS servers. Remember that the device exhausts all remote servers before resorting to local credentials—think of it as “try remote first, then local last” to avoid the trap of premature fallback. A helpful mnemonic is “Primary, Backup, Local” or simply “PBL” for the correct step-by-step order.