What are two drawbacks in assigning user privilege levels on a Cisco router? (Choose two.)

What are two drawbacks in assigning user privilege levels on a Cisco router? (Choose two.)

• Only a root user can add or remove commands.
• Privilege levels must be set to permit access control to specific device interfaces, ports, or slots.
• Assigning a command with multiple keywords allows access to all commands using those keywords.
• Commands from a lower level are always executable at a higher level.
• AAA must be enabled.

Explanation: Privilege levels may not provide desired flexibility and specificity because higher levels always inherit commands from lower levels, and commands with multiple keywords give the user access to all commands available for each keyword. Privilege levels cannot specify access control to interfaces, ports, or slots. AAA is not required to set privilege levels, but is required in order to create role-based views. The role of root user does not exist in privilege levels.

Exam with this question: CCNA Security Practice Final Exam Answers
Exam with this question: CCNA Security Final Exam Answers
Exam with this question: Network Security Final Exam Answers