Exam 300-410 topic 1 question 161 discussion

Almost sure it is D, but the command is a bit broken, D: "line con 0 aaa authorization console authorization exec ! line vty 0 4 transport input ssh " It needs to be: 1. globally enable authorization on console: aaa authorization console 2. move to line console 0: line con 0 3. Set the group to be used for authorization (note default is missing in the answer): authorization exec default 4. Go to line vty 0 4 (will set the same twice on next step): line vty 0 4 5. setting transport again to ssh: transport input ssh Note that "console authentication == DISABLED by default": more info https://flylib.com/books/en/1.233.1.74/1/ So concluding, answer is bad quality, but D seems best of them.

D is correct

Which command set is used to troubleshoot and resolve this issue? The issue is that the user cannot start an exec level session on the switch the command to allow that is: aaa authorization exec default group <group-name> (RADIUS-SERVERS) this command is already configured in the picture provided, so now configure it on the line con 0 with: (c-line) authorization exec default Option D is the only answer that resembles that command

D is correct

I actually prefer B. SSH has no problem login, so the authorisation for vty must work. B has vty authorisation exec which is the default authorisation rule, and console authentication should work already, so just need to enable aaa authorisation console, and line console 0 thus can be empty configured

option D: https://itexamanswers.net/question/refer-to-the-exhibit-a-network-administrator-successfully-logs-in-to-a-switch-using-ssh-from-a-radius-server-when-the-network-administrator-uses-a-console-port-to-access-the-switch-the-radius-server

"aaa authorization console" is a global command, so we won't apply it under the line configuration. "authorization exec" is only a partial command combiened with an authorization list (global). D is closest.

We need to enable aaa auth console and auth exec for console and D has them. I do not understand why the vty conf is repeated in D but is the only answer that resolves the issue.

can anyone explain this?

I think the ans is B