Where in the ACS are the individual downloadable ACL statements configured to achieve the most scalable deployment?
A.
Group Setup
B.
User Setup
C.
Shared Profile Components
D.
Network Access Profiles
E.
Network Configuration
F.
Interface Configuration
Explanation:
The Shared Profile Components section enables you to develop and name reusable, shared sets of authorization components which may be applied to one or more
users or groups of users and referenced by name within their profiles. These include network access restrictions (NARs), command authorization sets, and
downloadable PIX ACLs.
The Shared Profile Components section of Cisco Secure ACS addresses the scalability of selective authorization. Shared profile components can be configured
once and then applied to many users or groups.
Without this ability, flexible and comprehensive authorization could only be accomplished by explicitly configuring the authorization of each user group for each
possible command on each possible device. Creating and applying these named shared profile components (access restrictions, command sets, and ACLs) makes
it unnecessary to repeatedly enter long lists of devices or commands when defining network access parameters.
Shared profile components also enable Cisco Secure ACS to authorize a command on behalf of another device or devices. Their scalability extends to the following
capabilities:
A way to determine the list of commands a user could issue against one or more devices in the network.
A way to determine the list of devices on which a particular user may execute a particular command and
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_chapter09186a0 080205a4a.html