350-401 Question 235
Select 4You are tasked with securing a branch office network that uses Cisco devices. The organization requires Role-Based Access Control (RBAC) to ensure that administrative access is restricted based on user roles. Which of the following steps should you take to implement RBAC on Cisco devices effectively?
- A
Define custom privilege levels for different administrative roles.
- B
Configure local user accounts with specific roles using the 'username' command.
- C
Enable AAA (Authentication, Authorization, and Accounting) and configure a TACACS+ server.
- D
Use the 'service password-encryption' command to secure user passwords.
- E
Assign specific command sets to roles using the 'parser view' configuration.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
Role-Based Access Control (RBAC) is implemented on Cisco devices by defining custom privilege levels, configuring user roles, enabling centralized authentication and authorization through AAA and TACACS+, and assigning specific command sets to roles using the 'parser view' configuration. While securing passwords with 'service password-encryption' is good security practice, it is not directly related to RBAC implementation.
- A. Correct.
Defining custom privilege levels allows you to assign different levels of access to users, which is a critical step in implementing RBAC on Cisco devices.
- B. Correct.
Configuring local user accounts with specific roles ensures that each user is assigned an appropriate role with restricted permissions.
- C. Correct.
Enabling AAA and configuring a TACACS+ server centralizes authentication and authorization, which is essential for managing RBAC at scale.
- D. Incorrect.
The 'service password-encryption' command encrypts passwords stored in the configuration file but does not directly contribute to RBAC implementation.
- E. Correct.
Assigning specific command sets to roles using 'parser view' allows granular control over which commands are accessible to particular roles, which is a key component of RBAC.