200-301 · Question #296
Refer to the exhibit. An engineer booted a new switch and applied this configuration via the console port. Which additional configuration must be applied to allow administrators to authenticate direct
The correct answer is B. R1(config)#username admin privilege 15 secret p@ss1234. To allow administrators to authenticate directly into enable privilege mode via Telnet using a local username and password, a username must be created with privilege level 15 and an associated secret password.
Question
Refer to the exhibit. An engineer booted a new switch and applied this configuration via the console port. Which additional configuration must be applied to allow administrators to authenticate directly to enable privilege mode via Telnet using a local username and password?
Exhibits
Options
- AR1(config)#username admin
- BR1(config)#username admin privilege 15 secret p@ss1234
- CR1(config)#username admin secret p@ss1234
- DR1(config)#username admin
How the community answered
(35 responses)- A11% (4)
- B80% (28)
- C3% (1)
- D6% (2)
Why each option
To allow administrators to authenticate directly into enable privilege mode via Telnet using a local username and password, a username must be created with privilege level 15 and an associated secret password.
This command creates a username but lacks a password and does not specify a privilege level, preventing authentication and direct access to privilege mode.
This command creates a local username 'admin', assigns it the highest privilege level (15), which grants full access to enable mode, and sets a secure encrypted password 'p@ss1234' for authentication. This specific privilege level allows direct entry to enable mode after login.
This command creates a username with a password but defaults to privilege level 1, which would not grant direct access to enable privilege mode without an additional `enable secret` or `enable password` configured for privilege 15.
This command is incomplete as it creates a username without a password and omits the privilege level specification necessary for direct enable mode access.
Concept tested: Cisco local user authentication and privilege levels
Source: https://www.cisco.com/c/en/us/td/docs/ios/security/security/configuration/guide/12_4t/sec_12_4t_book/sec_usr_auth_priv_lvl.html
Topics
Community Discussion
No community discussion yet for this question.

