Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Cisco 300-715 Exam - Topic 2 Question 109 Discussion

An administrator needs to give the same level of access to the network devices when users are logging into them using TACACS+ However, the administrator must restrict certain commands based on one of three user roles that require different commands How is this accomplished without creating too many objects using Cisco ISE?
A) Create one shell profile and multiple command sets.
B) Create multiple shell profiles and multiple command sets.
C) Create one shell profile and one command set.
D) Create multiple shell profiles and one command set

Cisco 300-715 Exam - Topic 2 Question 109 Discussion

Actual exam question for Cisco's 300-715 exam
Question #: 109
Topic #: 2
[All 300-715 Questions]

An administrator needs to give the same level of access to the network devices when users are logging into them using TACACS+ However, the administrator must restrict certain commands based on one of three user roles that require different commands How is this accomplished without creating too many objects using Cisco ISE?

Show Suggested Answer Hide Answer
Suggested Answer: A

https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_0100010.html

https://www.youtube.com/watch?v=IlZwB71Szog&ab_channel=JasonMaynard


by Lashaunda at Apr 03, 2025, 03:41 PM

Limited Time Offer

25%

Off

Get Premium 300-715 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Taryn
9 months ago
Not sure about A, seems too limiting for different roles.
upvoted 0 times
...
Frederica
9 months ago
One shell profile keeps it simple, I agree with A.
upvoted 0 times
...
Maryrose
9 months ago
Wait, can you really manage that with just one command set?
upvoted 0 times
...
Tandra
9 months ago
I think B might be better for flexibility.
upvoted 0 times
...
Launa
9 months ago
Option A is the way to go!
upvoted 0 times
...
Coral
10 months ago
I recall that having too many objects can complicate things, so maybe option A is the best choice here with one shell profile and multiple command sets.
upvoted 0 times
...
Elenore
10 months ago
I'm a bit confused about the command sets. Do we really need multiple command sets if we can manage it with just one?
upvoted 0 times
...
Rana
10 months ago
I think we practiced a similar question where we had to limit access based on roles, and I feel like creating one shell profile might be the way to go.
upvoted 0 times
...
Mari
10 months ago
I remember we discussed using shell profiles and command sets in our last study session, but I'm not sure if one or multiple profiles is better for this scenario.
upvoted 0 times
...
Twana
11 months ago
This seems straightforward. I think the answer is to create one shell profile and multiple command sets. That way, we can give the same level of access to the network devices, but restrict the commands based on the user roles.
upvoted 0 times
...
Tawny
11 months ago
Okay, I've got a strategy here. Since we need to restrict certain commands based on user roles, I believe the best approach is to create multiple command sets, each with the appropriate commands for the different roles. Then we can associate those command sets with a single shell profile.
upvoted 0 times
...
Leonardo
11 months ago
Hmm, I'm a bit confused about the difference between shell profiles and command sets. I'll need to review that in the Cisco ISE documentation before I can confidently answer this.
upvoted 0 times
...
Cruz
11 months ago
This question seems straightforward. I think the key is to understand how to use shell profiles and command sets in Cisco ISE to achieve the desired access control.
upvoted 0 times
...
Carlee
1 year ago
Haha, I bet the administrator is wishing they had a magical wand to wave and make this problem disappear. Option A is definitely the most practical solution, though.
upvoted 0 times
Norah
1 year ago
User 3: It's definitely a more efficient solution than creating multiple shell profiles and command sets.
upvoted 0 times
...
Bambi
1 year ago
User 2: Yeah, creating one shell profile and multiple command sets would make it easier to manage.
upvoted 0 times
...
Graciela
1 year ago
User 1: I agree, option A seems like the best way to handle this.
upvoted 0 times
...
...
Vernice
1 year ago
I agree with Nieves. Option A is the best choice here. It allows for the flexibility to customize the command sets for each user role without creating too many objects.
upvoted 0 times
...
Nieves
1 year ago
Option A seems like the way to go. Creating one shell profile and multiple command sets is the most efficient way to handle this scenario.
upvoted 0 times
Ming
1 year ago
B) Create multiple shell profiles and multiple command sets.
upvoted 0 times
...
Deeanna
1 year ago
B) Create multiple shell profiles and multiple command sets.
upvoted 0 times
...
Ernest
1 year ago
That's a good point. It would make it easier to manage the different command sets.
upvoted 0 times
...
Clay
1 year ago
That sounds like a good plan. It will make it easier to manage access for different user roles.
upvoted 0 times
...
Ling
1 year ago
A) Create one shell profile and multiple command sets.
upvoted 0 times
...
Sheldon
1 year ago
A) Create one shell profile and multiple command sets.
upvoted 0 times
...
...
Bernardine
1 year ago
I think the answer is C) Create one shell profile and one command set because it would be simpler to manage.
upvoted 0 times
...
Tayna
1 year ago
I disagree, I believe the answer is B) Create multiple shell profiles and multiple command sets.
upvoted 0 times
...
Josefa
1 year ago
I think the answer is A) Create one shell profile and multiple command sets.
upvoted 0 times
...

Save Cancel