350-401 Question #1182: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. Which action automatically enables privilege exec mode when logging in via SSH?

Options

• AConfigure a password under the line configuration.
• BConfigure the enable secret to be the same as the secret for user "Cisco".
• CConfigure privilege level 15 under the line configuration.
• DConfigure user "cisco" with privilege level 15.

Explanation

To automatically grant a user privilege exec mode (level 15) upon SSH login, the user account must be explicitly configured with privilege level 15.

Common mistakes.

• A. Configuring a password under the line vty configuration sets the password for all users accessing those VTY lines but does not automatically grant privilege level 15.
• B. Having the enable secret be the same as a user's secret is poor security practice and does not automatically put the user into privilege exec mode; the user would still need to explicitly type enable.
• C. Configuring privilege level 15 under the line vty configuration would apply this privilege level to all users connecting via that line, which is a less granular and potentially insecure approach compared to per-user configuration.

Concept tested. Cisco IOS user privilege levels

Reference. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_user_auth/configuration/xe-3s/sec-user-auth-xe-3s-book/sec-usr-auth-priv-lvl.html

No community discussion yet for this question.