CCIE Security Core Knowledge Questions - Part 4

Feeling smart? :)   Give these Security CCIE core knowledge questions a try.  Click here for part 3 of this series.

Let us know what you feel the answers are, and good luck!

Implement Identity Management
Based on the example below, what commands will bob have the ability to use within the IOS?

enable secret cisco

username bob password cisco

username bob privilege 15

aaa new-model

aaa authentication login default group tacacs

aaa authorization config-commands

  
 
 
 
 aaa authorization commands 0 default  group tacacs+ local

aaa authorization commands 1 default  group tacacs+ local

aaa authorization commands 15 default group tacacs+ local

tacacs-server host 10.1.1.1

tacacs-server key cisco123

Implement secure networks using ASA Firewalls
When using SSH to connect to an ASA running in multiple mode, the changeto command does not work for one of the administrators. What would cause this?

Implement secure networks using IOS Firewalls
When is a standard IOS IP ACL used to identify a destination?

Configure advanced security
What does the "fragment" option mean when used with an ACE?

Best of luck!