nerdexam
Cisco

350-401 · Question #1182

Refer to the exhibit. Which action automatically enables privilege exec mode when logging in via SSH?

The correct answer is D. Configure user "cisco" with privilege level 15.. To automatically grant a user privilege exec mode (level 15) upon SSH login, the user account must be explicitly configured with privilege level 15.

Submitted by valeria.br· Mar 6, 2026Security

Question

Refer to the exhibit. Which action automatically enables privilege exec mode when logging in via SSH?

Exhibits

350-401 question #1182 exhibit 1
350-401 question #1182 exhibit 2

Options

  • AConfigure a password under the line configuration.
  • BConfigure the enable secret to be the same as the secret for user "Cisco".
  • CConfigure privilege level 15 under the line configuration.
  • DConfigure user "cisco" with privilege level 15.

How the community answered

(22 responses)
  • A
    5% (1)
  • B
    5% (1)
  • C
    9% (2)
  • D
    82% (18)

Why each option

To automatically grant a user privilege exec mode (level 15) upon SSH login, the user account must be explicitly configured with privilege level 15.

AConfigure a password under the line configuration.

Configuring a password under the `line vty` configuration sets the password for all users accessing those VTY lines but does not automatically grant privilege level 15.

BConfigure the enable secret to be the same as the secret for user "Cisco".

Having the `enable secret` be the same as a user's secret is poor security practice and does not automatically put the user into privilege exec mode; the user would still need to explicitly type `enable`.

CConfigure privilege level 15 under the line configuration.

Configuring `privilege level 15` under the `line vty` configuration would apply this privilege level to *all* users connecting via that line, which is a less granular and potentially insecure approach compared to per-user configuration.

DConfigure user "cisco" with privilege level 15.Correct

In Cisco IOS, privilege level 15 grants full administrative access, corresponding to privilege exec mode. By configuring a local user account (e.g., 'cisco') with `privilege level 15` using the `username <name> privilege 15 secret <password>` command, that user will automatically enter the highest privilege mode upon successful SSH authentication, bypassing the need for an `enable` command.

Concept tested: Cisco IOS user privilege levels

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_user_auth/configuration/xe-3s/sec-user-auth-xe-3s-book/sec-usr-auth-priv-lvl.html

Topics

#Cisco User Accounts#Privilege Levels#SSH Authentication

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice