Exam 300-410 topic 1 question 210 discussion

I don't get it. If you have no-exec nobody will be able to login to the console port. But username and password can only be used by security team.

Per cisco book page 938. Is the line enabled? Note that EXEC and EXEC-TIMEOUT accomplish very different things for the console and vty lines. EXEC is used to enable or disable the line. For example, typing the exec command in line configuration mode enables the line, but typing no exec in line configuration mode disables the line.

I think the correct answer is A. The question is asking for a security solution for line console, not line vty. D (if no exec is applied to console) will block all console connections (including security team). The only way to enforce selective login to console port among the provided answers is A (login and password). B is to disable idle timeout on line con C is to allow telnet to line con (unrelated to console) D is to block command execution on line con

When you want to allow an outgoing connection only for a line (no incoming) use the no exec command. When a user tries to Telnet to a line with the no exec command configured, the user will get no response when pressing the Return key at the login screen. https://community.cisco.com/t5/routing/no-exec/td-p/3715737

Is D just because they are talking about the config. If you want to protect the console access using some credentials you can use login local or just login, you can also use an authentication list that is gonna check an AD user for accessing the console port via tacacs. In this case login and password is not a valid command. The command that we maybe need is the no exec command just because someone is connecting to the switch via cable and if the enable goes well they are in. So with this command they block the exec mode in the switch so the console is pretty useless

D - https://www.cisco.com/c/en/us/td/docs/app_ntwk_services/waas/waas/v401_v403/command/reference/cmdref/execmds.html

Can someone please explain what makes the security team able to connect please ?

Selected answer D is correct, but please note "transport input none" would be a better solution in real life.

option correct is "D" https://www.tenable.com/audits/items/CIS_Cisco_IOS_15_v4.0.1_Level_1.audit:f6d68c36cfcc77325b421f9865134f41

Provided answer is correct For reference see: https://community.cisco.com/t5/routing/no-exec/td-p/3715737