🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 11 hours remaining!

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

A security engineer is configuring network device administration for a fleet of edge routers that must support multifactor authentication, command-by-command authorization, and granular accounting logs. The devices already speak AAA protocols and must keep user passwords encrypted end-to-end across the corporate MPLS WAN. Which access control solution best satisfies all of these requirements?

  • Configure Kerberos authentication on the routers and forward audit logs to a SIEM.

  • Integrate the routers with the existing RADIUS server using EAP-TLS for multifactor authentication.

  • Deploy a TACACS+ server cluster and point the routers' AAA settings to it.

  • Use LDAP over TLS directly on the routers and log commands locally to syslog.

ISC2 Systems Security Certified Practitioner (SSCP)
Network and Communication Security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot