Exam 200-301 topic 1 question 237 discussion

i like this question:)

D is correct If you set both enable password and enable secret. You will need to use the enable secret password to enter privileged mode.

D is correct If you set both enable password and enable secret. You will need to use the enable secret password to enter privileged mode.

D is correct

Can be easily tested in Packet Tracer. adminadmin123 is needed for general access, right after "Press RETURN to get started". ciscoadmin + adminadmin123, then "enable" and it accepts testing1234

D is correct

I tested it in PT. If you use AAA for local authentication like in the exhibit (I copied the exact lines from the exhibit), then try to Telnet in, it does not go straight to privileged EXEC mode; after logging in you will be prompted to enter the enable secret. But then I removed AAA from the configuration so that it was just simple local authentication, without AAA, and in that case the privilege 15 password is enough to get you straight into privileged EXEC mode, no need to enter the enable secret. So the key difference seems to be AAA.

Tested it in packet tracer but I don't know why it is the right answer. The following command will allow you to get to user exec mode from line con0 with username password login "username admin privilege level 15 password cisco123 > line con 0 > login local". Based on the commands shown in the picture it seems like they were doing the same thing making the username a level 15 account but for some reason it doesn't work. Hopefully one of yall could explain the difference between (username admin privilege level 15 password cisco123) vs (username admin password cisco123 > username admin privilege level 15).

D secret takes precedence

enable secret

D is right and A is wrong because enable secret secures the Privilege Exec mode of the system

D is the right answer that’s it

Gotta love the giveme questions. If you can't answer this question correctly in less than 5 seconds, you may want to start your studying over again.

The reason it is "D" is that the "adminadmin123" password gets you into USER EXEC mode. Once you enter the "enable" command it will prompt you for another password, and the "enable secret testing1234" command overrides the "enable password cisco123" forcing you to input "testing1234" to access the Privileged EXEC (enable mode).

Answer is D. I just did this in packet tracer. The first password will adminadmin123, but the question states " to get into ENABLE mode, which is testing1234 because the secret password triumphs the unencrypted password. So adminadmin123 will get you into the router, but testing1234 is what gets you into Enable mode.

Very tricky question indeed. If we remove the "login authentication default" command from VTY line, definitely the answer would be D, the one with the enable secret command. However, the "username ciscoadmin privilege 15" and "aaa new-model" commands make it a lot different. I am at work so I couldn't look deeper into it but in such scenario, the Engineer must use the ciscoadmin credentials in order to log into the device and because of the privilege 15, they go directly into enable mode. And because of the aaa new-model commands, no one else would be able to access to the device. so probably the answer is in fact A Damn it!! I hate this kind of questions!!!

D is correct.