What are two drawbacks in assigning user privilege levels on a Cisco router? (Choose two.)
- Only a root user can add or remove commands.
- Privilege levels must be set to permit access control to specific device interfaces, ports, or slots.
- Assigning a command with multiple keywords allows access to all commands using those keywords.
- Commands from a lower level are always executable at a higher level.
- AAA must be enabled.
Explanation: Privilege levels may not provide desired flexibility and specificity because higher levels always inherit commands from lower levels, and commands with multiple keywords give the user access to all commands available for each keyword. Privilege levels cannot specify access control to interfaces, ports, or slots. AAA is not required to set privilege levels, but is required in order to create role-based views. The role of root user does not exist in privilege levels.
Related exam: CCNA Security Practice Final Exam Answers
Related exam: CCNA Security Final Exam Answers
Related exam: Network Security Final Exam Answers
