Exam 300-715 topic 1 question 152 discussion

Actual exam question from Cisco's 300-715

Question #: 152
Topic #: 1

An administrator needs to give the same level of access to the network devices when users are logging into them using TACACS+. However, the administrator must restrict certain commands based on one of three user roles that require different commands.
How is this accomplished without creating too many objects using Cisco ISE?

A. Create one shell profile and one command set.
B. Create multiple shell profiles and one command set.
C. Create multiple shell profiles and multiple command sets.
D. Create one shell profile and multiple command sets.

Show Suggested Answer

Suggested Answer: D 🗳️

by hisho72 at Sept. 17, 2022, 12:20 p.m.

Comments

Submit Cancel

hisho72

Highly Voted 2 years, 1 month ago

Selected Answer: D

it should be one shell profile to all NADs in same level ... and one command set for the one who needs restrict commands if others does not need command set (blank in policy set page) or multiple command sets if the other two rules need command set to be set.. so the answer is ; A or D . and D is the nearest correct answer

upvoted 10 times

...

Tom1417

Most Recent 6 months, 1 week ago

We have three user roles (three is multiple). I think C is correct. Because each user's role should have its shell profile.

upvoted 1 times

...

XBfoundX

11 months, 2 weeks ago

D makes sense. We are going to create the same shell profile, the shell profile is where you assign the level of privilage returned to the NAD device for that user. What we can do is set a specific command set for have more control on administrator users.

upvoted 3 times

...

ElCobra90

1 year, 3 months ago

Selected Answer: D

C and D are both good Answer, but D is better because of the final sentence on the question "without creating too many objects using Cisco ISE", is right that could be worst configure one shell profile and multiple command set because is not scalable, if you have a lot of users might become cumbersome but if you udon't want to create many object then the best answer is D, even if in a REAL big environment the best One would be C.