300-715 · Question #106
A policy is being created in order to provide device administration access to the switches on a network. There is a requirement to ensure that if the session is not actively being used, after 10…
The correct answer is A. session timeout. To disconnect a device administration session after 10 minutes of inactivity, the session timeout feature (specifically, an idle timeout) must be configured.
Question
A policy is being created in order to provide device administration access to the switches on a network. There is a requirement to ensure that if the session is not actively being used, after 10 minutes, it will be disconnected. Which task must be configured in order to meet this requirement?
Options
- Asession timeout
- Bidle time
- Cmonitor
- Dset attribute as
How the community answered
(18 responses)- A89% (16)
- C6% (1)
- D6% (1)
Why each option
To disconnect a device administration session after 10 minutes of inactivity, the session timeout feature (specifically, an idle timeout) must be configured.
To automatically disconnect a device administration session that is not actively being used after a specified period, the session timeout feature (specifically, an idle timeout within session settings) must be configured. This enhances security by ensuring inactive administrative sessions are terminated.
'Idle time' refers to the *duration of inactivity*, not the specific configuration task or parameter name used to enforce a disconnect policy.
'Monitor' refers to observing system activity, rather than configuring a policy for session termination based on inactivity.
'Set attribute as' is a generic action for assigning a value to an attribute within a policy, not a specific task for configuring session inactivity-based termination.
Concept tested: TACACS+ Device Administration Session Timeout
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ISE_admin_3_1/m_configure_tacacs_command_sets_and_shell_profiles.html
Topics
Community Discussion
No community discussion yet for this question.