C2 - Quiz

What IOS privilege levels are available to assign for custom user-level privileges?

• levels 1 through 15
• levels 0, 1, and 15
• levels 2 through 14
• levels 0 and 1

Answer explanation

There are 16 privilege levels that can be applied to user accounts. Levels 0, 1, and 15 have predefined settings. This leaves levels 2 through 14 available for creating custom levels of access.

Which privilege level is predefined for the privileged EXEC mode?

• level 0
• level 1
• level 15
• level 16

Answer explanation

Privileged EXEC mode (privilege level 15) is reserved for the enable mode privileges (all enable-level commands). Users can change configurations and view configuration files.

An administrator needs to create a user account with custom access to most privileged EXEC commands. Which privilege command is used to create this custom account?

• privilege exec level 0
• privilege exec level 1
• privilege exec level 2
• privilege exec level 15

Answer explanation

In Cisco IOS software, there are 16 privilege levels: Level 0 : Predefined for user-level access privileges. Level 1 : The default level for login with the router prompt Router>. Levels 2 -14 : May be customized for user-level privileges. Commands from lower levels may be moved up to another higher level, or commands from higher levels may be moved down to a lower level. Level 15 : Reserved for the enable mode privileges (enable command). To configure a privilege level with specific commands for a customized user level, use the privilege exec level level [ command ], where level could be between 2 to 14.

Which command will move the show access-lists command to privilege level 14?

• router(config)# privilege level 14 command show access-lists
• router(config)# privilege exec level 14 show access-lists
• router(config)# show access-lists privilege level 14
• router(config)# set privilege level 14 show access-lists

Answer explanation

To configure a privilege level with specific commands, use the privilege exec level level [ command ].

Refer to the exhibit. Based on the output of the show running-config command, which type of view is SUPPORT?

• secret view, with a level 5 encrypted password
• root view, with a level 5 encrypted secret password
• superview, containing SHOWVIEW and VERIFYVIEW views
• CLI view, containing SHOWVIEW and VERIFYVIEW commands

Answer explanation

The superview role-based CLI view named SUPPORT has been configured on the router. The SUPPORT suerview consists of two CLI views called SHOWVIEW and VERIFYVIEW.

A student is learning role-based CLI access and CLI view configurations. The student opens Packet Tracer and adds a router. Which command should be used first for creating a CLI view named TECH-View?

• Router# enable view
• Router(config)# aaa new-model
• Router# enable view TECH-view
• Router(config)# parser view TECH-view

Answer explanation

Before an administrator can create a view for role-based CLI access, AAA must be enabled using the aaa new-model command.

A student is learning about role-based views and role-based view configurations. The student enters the Router(config)# parser view TECH-view command. What is the purpose of this command?

• to create a CLI view named TECH-view
• to enter the CLI view named TECH-view
• to enter the superview named TECH-view
• to check the current setup of the CLI view named TECH-view

Answer explanation

The command Router(config)# parser view [ view-name ] is used to create a new CLI view. The command Router(config)# parser view [ view-name ] superview is used to create a new superview view.

Refer to the exhibit. A student uses the show parser view all command to see a summary of all views configured on router R1. What is indicated by the symbol * next to JR-ADMIN?

• It is a root view.
• It is a CLI view.
• It is a superview.
• It is a CLI view without a command configured.

Answer explanation

From the root view, a network administrator can see a summary of all role-based views by using the show parser view all command. An asterisk identifies a superview.

What is a requirement to use the Secure Copy Protocol feature?

• The Telnet protocol has to be configured on the SCP server side.
• A transfer can only originate from SCP clients that are routers.
• At least one user with privilege level 1 has to be configured for local authentication.
• A command must be issued to enable the SCP server side functionality.

Answer explanation

The Secure Copy Protocol feature relies on SSH and requires that AAA authentication and authorization be configured so that the router can determine whether the user has the correct privilege level. For local authentication, at least one user with privilege level 15 has to be configured. Transfers can originate from any SCP client whether that client is another router, switch, or workstation. The ip scp server enable command has to be issued to enable the SCP server side functionality.​

What are two characteristics of the Cisco IOS Resilient Configuration feature? (Choose two.)

• It is a universal feature that can be activated on all Cisco devices.
• It minimizes the downtime of a device that has had the image and configuration deleted.
• It sends a backup copy of the IOS image to a TFTP server.
• It maintains a mirror image of the configuration file in RAM.
• It saves a secure copy of the primary image and device configuration that cannot be removed by a user.

Answer explanation

The Cisco IOS Resilient Configuration stores a secure copy of the primary image file and device configuration. These secure files cannot be removed by a user. Its main function is to speed up the recovery time if a device has been compromised and the image file and the device configuration have been deleted. This feature is only available on platforms that support a PCMCIA ATA disk with enough storage space.