350-701 · Question #667
Which two methods are valid to be included in an authentication method list? (Choose two.)
The correct answer is B. login E. enable. In Cisco IOS, login and enable are valid keywords used in authentication method lists to specify how users are authenticated for line access and privilege mode access, respectively.
Question
Which two methods are valid to be included in an authentication method list? (Choose two.)
Options
- Adefault
- Blogin
- Cconsole
- Dline
- Eenable
How the community answered
(28 responses)- A4% (1)
- B89% (25)
- D7% (2)
Why each option
In Cisco IOS, `login` and `enable` are valid keywords used in authentication method lists to specify how users are authenticated for line access and privilege mode access, respectively.
`default` is a method list name or a keyword to specify the default method list, not an authentication method itself.
The `login` keyword in an authentication method list specifies that users attempting to access a terminal line (e.g., via telnet, SSH, or console) must authenticate using the configured methods. This typically refers to user authentication for regular user EXEC mode.
`console` is a line type, not an authentication method to be used within a method list; authentication methods are applied *to* the console line.
`line` is a general command context for configuring physical or virtual terminal lines, not an authentication method.
The `enable` keyword in an authentication method list specifies that users attempting to enter privileged EXEC mode (by using the `enable` command) must authenticate using the configured methods. This secures access to elevated privileges on the device.
Concept tested: Cisco AAA authentication method lists
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/xe-16-11/sec-usr-aaa-xe-16-11-book/sec-cfg-aaa-authen.html
Topics
Community Discussion
No community discussion yet for this question.