Refer to the exhibit. An engineer is creating a new TACACS+ command set and cannot use any show commands after logging into the device with this command set authorization. Which configuration is causing this issue?
A.
The command set is allowing all commands that are not in the command list.
B.
The wildcard command listed is in the wrong format.
C.
The command set is working like an ACL and denying every command.
D.
Question marks are not allowed as wildcards for command sets.
The Correct Answer should be "D"
show Sho?? N Second "?" intersects with the character that does not exist
Check the "Command Line and Command Set List Match" Table
https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ISE_26_admin_guide/b_ISE_admin_26_device_admin.html#reference_BD55BB89E9F54BCDA856F5889122A4C5
The answer is B the command set says the command so the first command does not mean what the C answer is saying.
That statement means that the command any id DENIED
Why the admin is not able to do the show commands is because there is written sho?? so there is not the right command.
If you not use the option permit any command that is not listed below basically the admin will not be able to do nothing even show commands are not permitted.
Answer is B
Second "?" intersects with the character that does not exist
Ref.
https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ISE_26_admin_guide/b_ISE_admin_26_device_admin.html#reference_BD55BB89E9F54BCDA856F5889122A4C5
The given answer (C) is correct. Though the widlcard format may be wrong, the list is processed from top down. Deny any would take precedence and any rule below it would not be processed.
With the second "?" is does not match the command "show"
https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ISE_26_admin_guide/b_ISE_admin_26_device_admin.html#reference_BD55BB89E9F54BCDA856F5889122A4C5
upvoted 3 times
...
This section is not available anymore. Please use the main Exam Page.300-715 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Kavi
9 months, 2 weeks agoUW
5 months, 4 weeks agoZappBrannigan
1 year, 4 months agoNikoTomas
1 year, 2 months agoXBfoundX
1 year, 5 months agoCnoteone
2 years, 1 month agoNita_Mae
2 years, 3 months agoNita_Mae
2 years, 3 months agoIlPerdan0
2 years, 4 months agorealmephisto
2 years, 4 months ago