350-401 Question #310: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. Security policy requires all idle-exec sessions to be terminated in 600 seconds. Which configuration achieves this goal?

Options

• Aline vty 0 15
• Bline vty 0 15
• Cline vty 0 15
• Dline vty 0 4

Explanation

Explanation

Option C is correct because it configures exec-timeout 10 0 on line vty 0 15, which sets the idle timeout to exactly 600 seconds (10 minutes × 60 seconds = 600 seconds) across all 16 VTY lines (0–15), ensuring every remote session is terminated after the required idle period. Options A and B likely use incorrect timeout values (such as exec-timeout 600 0, which would set 600 minutes, or exec-timeout 0 600, which sets only 600 seconds but on the wrong line range), failing to meet the 600-second requirement properly. Option D is wrong because line vty 0 4 only covers the first 5 VTY lines, leaving lines 5–15 unprotected, which does not satisfy the policy requiring all idle-exec sessions to be terminated.

💡 Memory Tip: Remember that exec-timeout uses the format minutes seconds - so 600 seconds = 10 minutes 0 seconds → exec-timeout 10 0. Also, modern IOS devices support up to 16 VTY lines (0 15), so always use line vty 0 15 to cover all sessions when the policy says "all."

No community discussion yet for this question.