Refer to the exhibit. An engineer must create a configuration that executes the show run command and then terminates the session when user CCNP legs in. Which configuration change is required?

Question

Exhibits

Options

• AAdd the access-class keyword to the username command
• BAdd the access-class keyword to the aaa authentication command
• CAdd the autocommand keyword to the username command
• DAdd the autocommand keyword to the aaa authentication command

• A
  2% (1)
• C
  95% (39)
• D
  2% (1)

Explanation

Explanation

Option C is correct because the autocommand keyword within the username command allows you to specify a command that automatically executes when that specific user logs in, and then terminates the session upon completion - exactly what is needed for user CCNP to run show run and disconnect. The syntax would look like: username CCNP autocommand show run.

Why the distractors are wrong:

• Option A is incorrect because access-class is used to restrict login access based on an ACL (e.g., limiting which IP addresses can connect), not for executing commands automatically.
• Option B is incorrect because access-class applied to an AAA authentication command also controls access restrictions, not automatic command execution.
• Option D is incorrect because autocommand is not a valid keyword within the aaa authentication command; AAA commands handle authentication, authorization, and accounting policies, not per-user automatic commands.

Memory Tip: Think of "auto" in autocommand as automatic execution - it automatically runs a command for a specific user at login. Associate it with the username command because it is user-specific behavior, just like how a username defines individual user attributes.

No community discussion yet for this question.