nerdexam
Cisco

300-410 · Question #19

Refer to the exhibit. An administrator that is connected to the console does not see debug messages when remote users log in. Which action ensures that debug messages are displayed for remote logins?

The correct answer is D. Enter the aaa new-model configuration command. To ensure debug messages related to AAA for remote user logins are displayed, the aaa new-model command must be enabled as a prerequisite for detailed AAA debugging.

Infrastructure Security

Question

Refer to the exhibit. An administrator that is connected to the console does not see debug messages when remote users log in. Which action ensures that debug messages are displayed for remote logins?

Options

  • AEnter the transport input ssh configuration command.
  • BEnter the terminal monitor exec command.
  • CEnter the logging console debugging configuration command.
  • DEnter the aaa new-model configuration command.

How the community answered

(15 responses)
  • A
    13% (2)
  • B
    7% (1)
  • D
    80% (12)

Why each option

To ensure debug messages related to AAA for remote user logins are displayed, the `aaa new-model` command must be enabled as a prerequisite for detailed AAA debugging.

AEnter the transport input ssh configuration command.

The `transport input ssh` command configures SSH as the allowed transport protocol for incoming connections on a VTY line, which is unrelated to displaying debug messages.

BEnter the terminal monitor exec command.

The `terminal monitor` command allows a user on a VTY connection to see debug messages, but it does not enable the generation of specific debug messages if the underlying AAA new-model is not active.

CEnter the logging console debugging configuration command.

The `logging console debugging` command sets the logging level for the console, but it does not enable the generation of specific AAA debug messages if `aaa new-model` is not configured.

DEnter the aaa new-model configuration command.Correct

The `aaa new-model` command enables the new AAA access control model, which is a prerequisite for many advanced AAA features, including granular debugging for authentication, authorization, and accounting processes. Without this command, debug messages for remote user logins related to AAA might not be generated or properly displayed.

Concept tested: Enabling AAA for detailed debug logging

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/s1/sec-s1-cr-book/sec-s1-cr-cmd-chap2.html

Topics

#AAA#Debugging#Remote Access#Logging

Community Discussion

No community discussion yet for this question.

Full 300-410 Practice