Which statement is correct in this scenario?

You configured your system authentication order using the set authentication-order tacplus radius password command.

Which statement is correct in this scenario?
A . A rejection by TACACS+ will prevent a login and bypass the other two authentication methods.
B . The password authentication will only be used if the TACACS+ and RADIUS servers fail to respond.
C . All authentication methods are used with the most restrictive permission set used.
D . The password authentication method is evaluated if the TACACS+ and RADIUS servers respond with a reject message.

View Answer

Answer: B

Explanation:

In the scenario where the system authentication order is set to "tacplus radius password," the correct statement is (B). If the TACACS+ and RADIUS servers are unreachable or fail to respond, the system will fall back to using password authentication. This ensures that users can still authenticate using locally stored passwords if external authentication servers are unavailable.