350-401 Question 587
Select 3A network administrator is configuring secure remote access to a Cisco router. They want to ensure that both console access and VTY access require authentication using locally configured usernames and passwords. Which configuration commands are required to achieve this?
- A
line console 0 login local
- B
line vty 0 4 password cisco
- C
line vty 0 4 login local
- D
username admin privilege 15 secret cisco123
- E
enable secret cisco
Show answer and explanation
Correct answers: A, C, D
Explanation
To secure both console and VTY access using locally configured usernames and passwords, the 'login local' command must be applied under both the console and VTY lines. Additionally, a local username and password must be created using the 'username' command. The 'password' command is insufficient for local authentication because it does not tie into the local database. Similarly, the 'enable secret' command is unrelated to line authentication and is used for privileged EXEC mode access.
- A. Correct.
This command applies local authentication for console access, which is required to use locally defined usernames and passwords.
- B. Incorrect.
This command sets a password for VTY access but does not enable local authentication, making it insufficient for the requirement.
- C. Correct.
This command applies local authentication for VTY access, which is required to use locally defined usernames and passwords.
- D. Correct.
This command creates a locally defined username and password, which is necessary for local authentication to function.
- E. Incorrect.
This command sets the enable secret password for privileged EXEC mode but does not directly configure authentication for console or VTY access.