MENU
An administrator needs to give the same level of access to the network devices when users are logging into them using TACACS+ However, the administrator must restrict certain commands based on one of three user roles that require different commands How is this accomplished without creating too many objects using Cisco ISE?
Suggested Answer: A
Get Premium 300-715 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_0100010.html
https://www.youtube.com/watch?v=IlZwB71Szog&ab_channel=JasonMaynard
28 comments · newest first
TA
Taryn
10 months ago
Not sure about A, seems too limiting for different roles.
FR
Frederica
10 months ago
One shell profile keeps it simple, I agree with A.
MA
Maryrose
11 months ago
Wait, can you really manage that with just one command set?
TA
Tandra
11 months ago
I think B might be better for flexibility.
LA
Launa
11 months ago
Option A is the way to go!
CO
Coral
11 months ago
I recall that having too many objects can complicate things, so maybe option A is the best choice here with one shell profile and multiple command sets.
EL
Elenore
11 months ago
I'm a bit confused about the command sets. Do we really need multiple command sets if we can manage it with just one?
RA
Rana
12 months ago
I think we practiced a similar question where we had to limit access based on roles, and I feel like creating one shell profile might be the way to go.
MA
Mari
12 months ago
I remember we discussed using shell profiles and command sets in our last study session, but I'm not sure if one or multiple profiles is better for this scenario.
TW
Twana
1 year ago
This seems straightforward. I think the answer is to create one shell profile and multiple command sets. That way, we can give the same level of access to the network devices, but restrict the commands based on the user roles.
TA
Tawny
1 year ago
Okay, I've got a strategy here. Since we need to restrict certain commands based on user roles, I believe the best approach is to create multiple command sets, each with the appropriate commands for the different roles. Then we can associate those command sets with a single shell profile.
LE
Leonardo
1 year ago
Hmm, I'm a bit confused about the difference between shell profiles and command sets. I'll need to review that in the Cisco ISE documentation before I can confidently answer this.
CR
Cruz
1 year ago
This question seems straightforward. I think the key is to understand how to use shell profiles and command sets in Cisco ISE to achieve the desired access control.
CA
Carlee
1 year ago
Haha, I bet the administrator is wishing they had a magical wand to wave and make this problem disappear. Option A is definitely the most practical solution, though.
NO
Norah
1 year ago
User 3: It's definitely a more efficient solution than creating multiple shell profiles and command sets.
BA
Bambi
1 year ago
User 2: Yeah, creating one shell profile and multiple command sets would make it easier to manage.
GR
Graciela
1 year ago
User 1: I agree, option A seems like the best way to handle this.
VE
Vernice
1 year ago
I agree with Nieves. Option A is the best choice here. It allows for the flexibility to customize the command sets for each user role without creating too many objects.
NI
Nieves
1 year ago
Option A seems like the way to go. Creating one shell profile and multiple command sets is the most efficient way to handle this scenario.
MI
Ming
1 year ago
B) Create multiple shell profiles and multiple command sets.
DE
Deeanna
1 year ago
B) Create multiple shell profiles and multiple command sets.
ER
Ernest
1 year ago
That's a good point. It would make it easier to manage the different command sets.
CL
Clay
1 year ago
That sounds like a good plan. It will make it easier to manage access for different user roles.
LI
Ling
1 year ago
A) Create one shell profile and multiple command sets.
SH
Sheldon
1 year ago
A) Create one shell profile and multiple command sets.
BE
Bernardine
1 year ago
I think the answer is C) Create one shell profile and one command set because it would be simpler to manage.
TA
Tayna
2 years ago
I disagree, I believe the answer is B) Create multiple shell profiles and multiple command sets.
JO
Josefa
2 years ago
I think the answer is A) Create one shell profile and multiple command sets.