Exam 350-401 topic 1 question 971 discussion

MaxF1(config)# line vty 0 4 MaxF1(config-line)# login local MaxF1(config-line)# privilege level 15 With this configuration, the device prompts for a username and password when accessing the vty lines, and upon successful authentication, the user is placed into privilege exec mode automatically.

login local means the local username definition is used therefore privilege level should be added to the user definition not to the line

ref: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960l/software/15-2_5_e/config-guide/b_1525e_consolidated_2960l_cg/b_1525e_consolidated_2960l_cg_chapter_0100001.pdf line vty line Example: Switch(config)# line vty 10 Switch(config)# privilege level 15 Changes the default privilege level for the line. for normal user EXEC mode privileges. Level the level of access permitted by the enable password.

Option "c" works if password checking is enabled --using the 'login' command. The following configuration prompts the user to enter a password and automatically grants privilege EXEC mode when connecting via SSH: -------- Router(config)# line vty 0 15 Router(config-line)# password 123 Router(config-line)# login Router(config-line)# privilege level 15 ------- Since we're using both a username and a password for login --using the 'login local' command, it is essential to set the user privilege level to 15 (the highest privilege) as follows: ---------- Router(config)# username cisco privilege 15 secret 5 $1$cM67$v7NQK0g2BGit77x88U1/00 ---------- With this configuration, any user logging in with the username "cisco" and the corresponding password will be placed directly into privilege EXEC mode upon authentication.

C makes sense

I'm going with C. The question asks "Which action automatically enables privilege exec mode when logging in via SSH?". This sounds like they're asking REGARDLESS of the account you use to log in, not just limited to the user "cisco". C seems more accurate in this regard. If they were asking specifically how to give the user "cisco" privileged access when logging in via SSH, then D would be more accurate.

The privilege command on the vty lines override all the privilege levels sent via RADIUS or set in the local database. And because the question implies "automatically" the clear answer is C

D looks correct for me

Answer D seems correct. #username cisco privilege 15 secret 5 yyyyy

It didnt specify which user, so any user will be option C.

So the answer is C, it is not stated that only user cisco needs to gain privillige access

Because of the Cisco username is shown in the output as the only user, but C is the right option all users that aren't there.

D applies to user cisco only C applies to all users C and D are correct but C is better IMO

Why C is wrong ?

https://learningnetwork.cisco.com/s/question/0D53i00000KstA2CAJ/privilege-level-when-username-command-is-configured

https://learningnetwork.cisco.com/s/blogs/a0D3i000002eeWTEAY/cisco-ios-privilege-levels