Refer to the exhibit. A network engineer must log in to the router via the console, but the RADIUS servers are not reachable. Which credentials allow console access1?

Question

Exhibits

Options

• Athe username "cisco" and the password "Cisco"
• Bno username and only the password "test123"
• Cno username and only the password "cisco123"
• Dthe username "cisco" and the password "cisco123"

• A
  8% (4)
• B
  4% (2)
• C
  77% (37)
• D
  10% (5)

Explanation

Explanation

When RADIUS servers are unreachable, AAA authentication falls back to the local fallback method, which in this scenario is configured as none or line - meaning the router uses the console line password (configured with password cisco123) rather than requiring a username. Option C is correct because the aaa authentication login command for the console line is configured to fall back to the line password (cisco123) when RADIUS is unavailable, requiring no username.

Why the distractors are wrong:

• Option A is incorrect because "Cisco" (capital C) does not match any configured password, and a username is not required for line-based fallback.
• Option B is incorrect because "test123" is typically the enable or RADIUS test password, not the console line password.
• Option D is incorrect because the line fallback method does not require a username - it only prompts for the line password.

Memory Tip

Think of it this way: "Line password = no username needed." When AAA falls back to the line method, the router ignores usernames entirely and only checks the password configured directly on that line (password cisco123). If you see aaa authentication login with a fallback of line, always look for the password command under the console line.

No community discussion yet for this question.