QuestionQ590

Security Fundamentals

Question Image

Refer to the exhibit. An engineer has booted a new switch and entered this configuration through the console port.

Which additional configuration is required so administrators can authenticate directly to global configuration mode by Telnet using a local username and password?

  • A R1(config)#username admin -R1(config-if)#line vty 0 4 -R1(config-line)#password p@ss1234R1(config-line)#transport input telnet
  • B R1(config)#username admin privilege 15 secret p@ss1234R1(config-if)#line vty 0 4 -R1(config-line)#login local
  • C R1(config)#username admin secret p@ss1234R1(config-if)#line vty 0 4 -R1(config-line)#login local -R1(config)#enable secret p@ss1234
  • D R1(config)#username admin -R1(config-if)#line vty 0 4 -R1(config-line)#password p@ss1234
Explanation

For Telnet access to use the device's local username database, the VTY lines must be configured with login local, and a local username must be defined. To land with full administrative privileges instead of entering user EXEC first, that local account must have privilege level 15. Cisco documentation states that login local enables local password checking on VTY lines, and that privilege level 15 corresponds to privileged EXEC access. Therefore the correct configuration is the one that defines username admin privilege 15 secret ... and applies login local under line vty 0 4.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!