Examkin

Question

Difficulty: MediumDevice Access Control and Local Password Authentication

A technician configures initial administrative security on a newly racked Cisco IOS XE switch using the following CLI commands:

text
username netadmin secret C1sco!Pass2026
line console 0
password C1sco!Pass2026
login

During validation, the technician observes that connecting via the serial console prompts only for a password, allowing login without entering the username `netadmin` stored in the local database.

Which command must be executed under `line console 0` to require authentication against the local user database?

  1. login localAnswer
  2. B
    service password-encryption
  3. C
    transport input ssh
  4. D
    enable secret C1sco!Pass2026

Answer

The 'login local' command must be executed under line console 0 to force the switch to prompt for both a username and password defined in the local user database.
The 'login local' command configures line console 0 to authenticate access using credentials defined in the device's local database (created via 'username' commands). This causes the device to display both 'Username:' and 'Password:' prompts during login.

Step-by-Step Solution

1
Analyze the current line console 0 configuration snippet
The current line configuration contains 'password C1sco!Pass2026' followed by 'login', which configures simple password-only line authentication.
The standard 'login' keyword under line configuration checks only against the line-specific password and ignores local username database entries.
2
Identify the CLI keyword required to consult the local user database
Replacing 'login' with 'login local' instructs Cisco IOS XE to prompt for both username and password credentials.
The 'local' parameter directs authentication requests to user accounts configured via global 'username' statements.

Key Concept

Cisco IOS Line Authentication Modes and Local Database Integration
Estimated Time:1m 0s
Rate this question

Topics

Device Access Control and Local Password Authentication

More questions from this topic