nerdexam
Cisco

300-070 · Question #404

Your MSE 8510 has been configured with advanced security. A user locked themselves out of their account. By default, which action must be performed to allow the user access again?

The correct answer is B. You must log in and reset the password for the account. When advanced security is enabled on MSE 8510, a locked account does not auto-unlock after a timeout - an administrator must manually log in and reset the account.

Troubleshooting

Question

Your MSE 8510 has been configured with advanced security. A user locked themselves out of their account. By default, which action must be performed to allow the user access again?

Options

  • AYou can either log in and reset it, or you can wait for 30 minutes because the system resets
  • BYou must log in and reset the password for the account.
  • CYou must log in via ssh as administrator and edit the /etc/passwd file.
  • DYou can either log in and reset it, or you can wait for 60 minutes because the system resets

How the community answered

(25 responses)
  • A
    8% (2)
  • B
    88% (22)
  • D
    4% (1)

Why each option

When advanced security is enabled on MSE 8510, a locked account does not auto-unlock after a timeout - an administrator must manually log in and reset the account.

AYou can either log in and reset it, or you can wait for 30 minutes because the system resets

A 30-minute automatic reset applies to a lower security configuration, not the advanced security mode; advanced security on MSE 8510 does not auto-unlock accounts after any timed interval.

BYou must log in and reset the password for the account.Correct

With advanced security configured on MSE 8510, the lockout policy is strict and requires manual administrator intervention to restore account access. Unlike standard security mode where an automatic timeout may release the lock, advanced security mode mandates that an administrator explicitly reset the locked account before the user can log in again.

CYou must log in via ssh as administrator and edit the /etc/passwd file.

Directly editing /etc/passwd via SSH is not the correct or supported administrative procedure for unlocking accounts on MSE 8510; the proper method is to use the administrative interface to reset the account.

DYou can either log in and reset it, or you can wait for 60 minutes because the system resets

A 60-minute automatic reset is also not a behavior of advanced security mode on MSE 8510; advanced security requires explicit manual administrator action regardless of elapsed time.

Concept tested: MSE 8510 advanced security account lockout policy

Source: https://www.cisco.com/c/en/us/support/telepresence/telepresence-mse-8510/products-installation-and-configuration-guides-list.html

Topics

#MSE 8510#account lockout#advanced security#password reset

Community Discussion

No community discussion yet for this question.

Full 300-070 Practice