100-160 Question 34
Select 3A company has implemented a RADIUS server to centralize authentication for its network devices. To enhance security, they want to enforce multifactor authentication (MFA) for remote access users and implement a strong password policy. Which of the following actions should the company take to meet their requirements?
- A
Configure the RADIUS server to require a one-time password (OTP) in addition to the user’s credentials.
- B
Enforce a minimum password length and complexity policy for all user accounts.
- C
Use only the RADIUS server to authenticate users without any additional security factors.
- D
Integrate the RADIUS server with an MFA solution like a mobile authenticator app.
- E
Disable password expiration policies to simplify user management.
Show answer and explanation
Correct answers: A, B, D
Explanation
To meet the company's requirements, the RADIUS server must enforce MFA by integrating with an additional factor like OTP or an authenticator app. Additionally, a strong password policy, including complexity and length requirements, is essential to enhance security. Simply relying on the RADIUS server or weakening password policies does not satisfy the stated security goals.
- A. Correct.
Correct: Requiring a one-time password (OTP) adds an additional layer of security, satisfying the multifactor authentication requirement.
- B. Correct.
Correct: Enforcing a minimum password length and complexity ensures stronger password security, which is part of a robust password policy.
- C. Incorrect.
Incorrect: Using only the RADIUS server without additional factors does not meet the requirement for multifactor authentication.
- D. Correct.
Correct: Integrating the RADIUS server with an MFA solution like a mobile authenticator app provides the second factor needed for MFA.
- E. Incorrect.
Incorrect: Disabling password expiration weakens security and contradicts best practices for password policies.