nerdexam
Cisco

200-301 · Question #296

Refer to the exhibit. An engineer booted a new switch and applied this configuration via the console port. Which additional configuration must be applied to allow administrators to authenticate direct

The correct answer is B. R1(config)#username admin privilege 15 secret p@ss1234. To allow administrators to authenticate directly into enable privilege mode via Telnet using a local username and password, a username must be created with privilege level 15 and an associated secret password.

Submitted by fernanda_arg· Mar 5, 2026Security Fundamentals

Question

Refer to the exhibit. An engineer booted a new switch and applied this configuration via the console port. Which additional configuration must be applied to allow administrators to authenticate directly to enable privilege mode via Telnet using a local username and password?

Exhibits

200-301 question #296 exhibit 1
200-301 question #296 exhibit 2

Options

  • AR1(config)#username admin
  • BR1(config)#username admin privilege 15 secret p@ss1234
  • CR1(config)#username admin secret p@ss1234
  • DR1(config)#username admin

How the community answered

(35 responses)
  • A
    11% (4)
  • B
    80% (28)
  • C
    3% (1)
  • D
    6% (2)

Why each option

To allow administrators to authenticate directly into enable privilege mode via Telnet using a local username and password, a username must be created with privilege level 15 and an associated secret password.

AR1(config)#username admin

This command creates a username but lacks a password and does not specify a privilege level, preventing authentication and direct access to privilege mode.

BR1(config)#username admin privilege 15 secret p@ss1234Correct

This command creates a local username 'admin', assigns it the highest privilege level (15), which grants full access to enable mode, and sets a secure encrypted password 'p@ss1234' for authentication. This specific privilege level allows direct entry to enable mode after login.

CR1(config)#username admin secret p@ss1234

This command creates a username with a password but defaults to privilege level 1, which would not grant direct access to enable privilege mode without an additional `enable secret` or `enable password` configured for privilege 15.

DR1(config)#username admin

This command is incomplete as it creates a username without a password and omits the privilege level specification necessary for direct enable mode access.

Concept tested: Cisco local user authentication and privilege levels

Source: https://www.cisco.com/c/en/us/td/docs/ios/security/security/configuration/guide/12_4t/sec_12_4t_book/sec_usr_auth_priv_lvl.html

Topics

#Cisco local authentication#Cisco privilege levels#User account management#Telnet remote access

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice