300-410 ENARSI have many confuse question for me .... oh my god

I had to Lab this to understand it. Of the answers given, none are right! aaa commands aren't supported directly on the lines and for this scenario to work the Global Command aaa authorization console needed to be added to the configuration!

Almost sure it is D, but the command is a bit broken, D: "line con 0 aaa authorization console authorization exec ! line vty 0 4 transport input ssh " It should be: 1. globally enable authorization on console: aaa authorization console 2. move to line console 0: line con 0 3. Set the group to be used for authorization (note default is missing in the answer): authorization exec default 4. Go to line vty 0 4 (will set the same twice on next step): line vty 0 4 5. setting transport again to ssh: transport input ssh Note that "console authentication == DISABLED by default": more info https://flylib.com/books/en/1.233.1.74/1/ So, in conclusion, the answer is poor quality, but D looks best of the choices.

"aaa authorization console" is a global command, so we don't apply it under the line configuration. "authorization exec" is only a partial command combined with an authorization list (global). D is the closest.

Selected Answer: D We need to turn on aaa auth console and auth exec for console and D has them. I do not get why the vty conf is repeated in D, but it is the only answer that fixes the issue.

Selected Answer: D Which command set is used to troubleshoot and resolve this issue? The problem is that the user cannot start an exec level session on the switch the command to allow that is: aaa authorization exec default group <group-name> (RADIUS-SERVERS) this command is already configured in the picture provided, so now configure it on the line con 0 with: (c-line) authorization exec default Option D is the only answer that even looks like that command

Selected Answer: D option D: https://itexamanswers.net/question/refer-to-the-exhibit-a-network-administrator-successfully-logs-in-to-a-switch-using-ssh-from-a-radius-server-when-the-network-administrator-uses-a-console-port-to-access-the-switch-the-radius-server

I think the ans is B

can anyone explain this?

Selected Answer: B I actually lean toward B. SSH has no issue logging in, so the authorization for vty must be working. B has vty authorisation exec which is the default authorisation rule, and console authentication should already work, so you only need to enable aaa authorisation console, and line console 0 can then stay empty configured

D is correct

authentication console is NOT off by default, authorization is. Bad question anyway. ANswer = D.