Network Security Module 5-7

A student is learning role-based CLI access and CLI view configurations. The student opens Packet Tracer and adds a router. Which command should be used first for creating a CLI view named TECH-view?

• Router# enable view TECH-view

• Router# enable view

• Router(config)# parser view TECH-view

• Router(config)# aaa new-model

Which command will move the show access-lists command to privilege level 14?

• router(config)# privilege exec level 14 show access-lists

• router(config)# show access-lists privilege level 14

• router(config)# set privilege level 14 show access-lists

• router(config)# privilege level 14 command show access-lists

Refer to the exhibit. Based on the output of the show running-config command, which type of view is SUPPORT?

• superview, containing SHOWVIEW and VERIFYVIEW views

• secret view, with a level 5 encrypted password

• root view, with a level 5 encrypted secret password

• CLI view, containing SHOWVIEW and VERIFYVIEW commands

What are three characteristics of superviews in the Cisco role-based CLI access feature? (Choose three.)

• A single CLI view can be shared within multiple superviews.

• Level 15 privilege access is used to configure a new superview.

• Commands cannot be configured for a superview.

• A user uses a superview to configure commands inside associated CLI views.

• Deleting a superview does not delete the associated CLI views.

Which privilege level is predefined for the privileged EXEC mode?

• level 1

• level 0

• level 16

• level 15

An administrator needs to create a user account with custom access to most privileged EXEC commands. Which privilege command is used to create this custom account?

• privilege exec level 15

• privilege exec level 0

• privilege exec level 1

• privilege exec level 2

A student is learning about role-based views and role-based view configurations. The student enters the Router(config)# parser view TECH-view command. What is the purpose of this command?

• to enter the CLI view named TECH-view

• to enter the superview named TECH-view

• to create a CLI view named TECH-view

• to check the current setup of the CLI view named TECH-view

A network engineer is implementing security on all company routers. Which two commands must be issued to force authentication via the password 1A2b3C for all OSPF-enabled interfaces in the backbone area of the company network? (Choose two.)

• area 0 authentication message-digest

• enable password 1A2b3C

• ip ospf message-digest-key 1 md5 1A2b3C

Which three items are prompted for a user response during interactive AutoSecure setup? (Choose three.)

• interfaces to enable

• enable secret password

• enable password

• services to disable

• content of a security banner

What is a requirement to use the Secure Copy Protocol feature?

• The Telnet protocol has to be configured on the SCP server side.

• A command must be issued to enable the SCP server side functionality.