300-410 · Question #19
Refer to the exhibit. An administrator that is connected to the console does not see debug messages when remote users log in. Which action ensures that debug messages are displayed for remote logins?
The correct answer is D. Enter the aaa new-model configuration command. To ensure debug messages related to AAA for remote user logins are displayed, the aaa new-model command must be enabled as a prerequisite for detailed AAA debugging.
Question
Options
- AEnter the transport input ssh configuration command.
- BEnter the terminal monitor exec command.
- CEnter the logging console debugging configuration command.
- DEnter the aaa new-model configuration command.
How the community answered
(15 responses)- A13% (2)
- B7% (1)
- D80% (12)
Why each option
To ensure debug messages related to AAA for remote user logins are displayed, the `aaa new-model` command must be enabled as a prerequisite for detailed AAA debugging.
The `transport input ssh` command configures SSH as the allowed transport protocol for incoming connections on a VTY line, which is unrelated to displaying debug messages.
The `terminal monitor` command allows a user on a VTY connection to see debug messages, but it does not enable the generation of specific debug messages if the underlying AAA new-model is not active.
The `logging console debugging` command sets the logging level for the console, but it does not enable the generation of specific AAA debug messages if `aaa new-model` is not configured.
The `aaa new-model` command enables the new AAA access control model, which is a prerequisite for many advanced AAA features, including granular debugging for authentication, authorization, and accounting processes. Without this command, debug messages for remote user logins related to AAA might not be generated or properly displayed.
Concept tested: Enabling AAA for detailed debug logging
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/s1/sec-s1-cr-book/sec-s1-cr-cmd-chap2.html
Topics
Community Discussion
No community discussion yet for this question.