Chapter Review

The CiscoSecure Access Control Server (ACS) is a server-based application offering centralized user access control support for the various network devices. CiscoSecure ACS can be installed on either Windows or UNIX servers that meet minimum resource requirements.

ACS allows the administrator to manage user access for Cisco IOS routers, firewalls, Cisco Catalyst switches, and virtual private networks (VPNs), as well as newer technologies like dial-up and broadband DSL, cable access solutions, voice over IP (VoIP), Cisco wireless implementations, and third-party vendor TACACS+ offerings.

ACS is a strategic product at Cisco, incorporating new advanced features as they become available to increase the diversity and granularity of implementations. Current support includes the use of network OS security databases and management tools, user and administrative access reporting, database synchronization and user importation tools, Lightweight Directory Access Protocol (LDAP) user authentication support, dynamic quota generation, and restrictions such as time of day and day of week, as well as user and device group profiles.

Questions

1.?	Which two of the following are server platforms supported by Cisco Secure ACS? Novell NetWare Microsoft Windows UNIX (Sun Solaris) Linux
2.?	Which one of the following isn’t controllable by a network administrator using Cisco Secure ACS for Windows? What accounting information is kept for capacity planning, account billing, or security audits What privileges each user will have while in the network What encryption method will be used for interdevice communications Which users can access the network from either wired or wireless connections What access and command controls are enabled for each configuration administrator
3.?	Which IEEE standard is being introduced to support CiscoSecure ACS in the LAN? 802.1q 802.11b 802.1x 802.3au
4.?	True or False. Cisco Secure ACS for Windows does not support MSCHAP version 2. True False
5.?	True or False. Cisco Secure ACS for Windows supports per-user access control lists. True False
6.?	True or False. Cisco Secure ACS for Windows requires a choice between TACACS+ and RADIUS support. True False
7.?	Cisco Secure ACS supports Token Card authentication on which platform? Windows only UNIX only Both UNIX and Windows Neither one
8.?	Which Cisco Secure ACS for Windows service is the internal web server? CSAuth CSMon CSLog CSAdmin
9.?	Which Cisco Secure ACS-supported database would provide fastest authentication? Windows NT/2000 user database Novell NDS Token Card servers CiscoSecure user database
10.?	Which of the following does not impact Cisco Secure ACS server performance? Number and size of the CPUs Amount of server memory Number of users in the database Remote users connection speed
11.?	Which of the following won’t work as a Cisco Secure ACS platform? Windows 2000 Server Windows 2000 Advanced Server Windows 2000 Datacenter Server Windows 2000 Professional Windows NT Server 4.0
12.?	True or False. Cisco Secure ACS for Windows and UNIX are identical, and they provide the same features and service. True False
13.?	True or False. One limitation of Cisco Secure ACS for UNIX is its lack of support for TACACS+. True False
14.?	Once installed, Cisco Secure ACS is configured and administered using what? CLI only Web browser only CLI and/or web browser Windows Management Interface
15.?	Which two of the following will only access the ACS HTML interface using a web browser from the server on which Cisco Secure ACS is installed? http://Windows-server-IP-address:2002 http://localhost:2002 http://Windows-server-host-name:2002 http://127.0.0.1:2002

Answers

1.?	B. and C. Microsoft Windows and UNIX (Sun Solaris)
2.?	C. What encryption method will be used for interdevice communications
3.?	C. 802.1x
4.?	B. False. With ACS for Windows v3.0, it now supports MSCHAP.
5.?	A. True
6.?	B. False. It will support both simultaneously.
7.?	C. Both UNIX and Windows
8.?	B. CSMon
9.?	D. CiscoSecure user database because it’s internal to ACS
10.?	D. The remote users connection speed
11.?	D. Windows 2000 Professional. It must be a version of the server.
12.?	B. False
13.?	B. False. Cisco Secure ACS for UNIX supports both.
14.?	B. Web browser only
15.?	B. http://localhost:2002 and d. http://127.0.0.1:2002