300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and ServicesDemo

Question

Question Image

Refer to the exhibit. A network administrator logs in to the router with TACACS+ username and password credentials, but cannot execute any privileged commands.

Which action resolves this issue?

A Configure the username from a local database
B Configure TACACS+ synchronization with the Active Directory admin group
C Configure an authorized IP address for this user to access this router
D Configure full access for the username from TACACS+ server

Explanation

TACACS+ performs authentication and authorization separately. A successful login with a failed authorization response means the account is authenticated but is not authorized for privileged EXEC or command access. Assigning full access (appropriate privilege and command authorization) to the username on the TACACS+ server permits the privileged commands.

Learn more

Cisco IOS XE: Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services

300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and ServicesDemo

AstroTutor

Notes

Readiness

QuestionQ194

Community Discussion