A network engineer must configure the VTY lines on a router to achieve these results:
• Remote access should be permitted for all feasible protocols.
• Only a password should be required for device authentication.
• All idle EXEC sessions must be terminated in 60 minutes.
Which configuration should be applied?
The Cisco ‘exec-timeout‘ command sets a specific time to disconnect idle EXEC sessions. The default value for the EXEC timeout is 10 minutes. The absolute timeout terminates the EXEC session even if it is still active and is used during the set timeout period. For this reason I say the given answer is correct.
Can NOT be B. Requirement: "All idle EXEC" so, "idle" is the key word. "The absolute timeout terminates the EXEC session even if it is still active and is used during the set timeout period...Idle EXEC sessions are not terminated by default."
'login' is required
Correct Answer: C 1.Only a password >> line vty 0 15 login OR line vty 0 15 password 2.EXEC sessions must be terminated in 60 minutes >> exec-timeout 60 0. Not absolute-timeout 60
Answer is B
It's B Login: Only requires a password Login local: Requires both a username and a password
As explained above, only the idle sessions should be terminated, so it's B
NO "All idle EXEC sessions must be terminated in 60 minutes." IDLE is there and absolute kills All sessions idle or active.
Should be B. it asks for "only a password is required". This is achieved by the login command. It's missing on C.
B has "absolute-timeout". "All IDLE EXEC sessions must be terminated in 60 minutes." IDLE is Absolute kills All sessions idle or active. "The absolute-timeout command in Cisco IOS is used to set a fixed time interval after which a user session will be terminated, regardless of whether the connection is active or idle" hth
I choose B. The conditions must be met one by one; firstly, the condition 'all feasible protocols' is met by both solution B and C; the second condition 'only a password' is only ensured by solution B. For solution C, although a password is configured, without the `login` command, this password will not be requested during the connection." "The third condition is literally met by solution C, but solution B also meets it. Because it is never specified 'idle exec' sessions only. Using absolute-timeout closes all sessions, active or inactive (meeting our third condition