Cisco Certified Internetwork Expert (CCIE) Practice Test

Disable ads (and more) with a membership for a one time $2.99 payment

Master the Cisco Certified Internetwork Expert Exam. Engage with our comprehensive questions and detailed explanations. Prepare effectively and achieve your certification goals!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.

Which three Cisco attributes for LDAP authorization are supported on the ASA? (Choose three)

Authenticated-User-Idle-Timeout
Web-VPN-ACL-Filters
L2TP-Encryption
IPsec-Default-Domain

The correct answer is: Authenticated-User-Idle-Timeout

The attributes supported for LDAP authorization on the ASA provide essential functionalities for managing user sessions and access. The choice of Authenticated-User-Idle-Timeout is particularly important because it defines how long an authenticated user can remain idle before the session is terminated. This is crucial in maintaining security by ensuring that inactive sessions do not remain accessible indefinitely, reducing the risk of unauthorized access. The design of LDAP authorization on the ASA includes various mechanisms to enhance security and manage user access based on specific requirements. Understanding these attributes in the context of LDAP helps in fine-tuning the security posture of the network. Items like Web-VPN-ACL-Filters, L2TP-Encryption, and IPsec-Default-Domain are linked to specific configurations and protocols that do not play a role in LDAP authorization, making them less relevant in this context. Recognizing the characteristics of each attribute is fundamental for properly configuring and leveraging Cisco ASA for secure access management within a network utilizing LDAP.