Which Cisco IOS access level can be protected with passwords to restrict access to privileged commands?

Which Cisco IOS access level can be protected with passwords to restrict access to privileged commands?

• A. VTY interface
• B. Console interface
• C. Ethernet interface
• D. Privileged EXEC mode

Answer: (D)

When you want to limit who can run the more powerful, configuration-related commands, you protect Privileged EXEC mode with a password (the enable password or, preferably, an enable secret). Users start in User EXEC mode with limited commands, and to execute privileged-level commands you enter Privileged EXEC mode by typing enable and authenticating. This is the level that directly gates access to privileged commands, so securing it controls who can perform configuration and admin tasks. Line types like the console or VTY can require passwords for login, but that only controls who can access the device; after logging in, reaching the privileged commands is determined by the enable password. An Ethernet interface isn’t related to access control for command privilege.

When you want to limit who can run the more powerful, configuration-related commands, you protect Privileged EXEC mode with a password (the enable password or, preferably, an enable secret). Users start in User EXEC mode with limited commands, and to execute privileged-level commands you enter Privileged EXEC mode by typing enable and authenticating. This is the level that directly gates access to privileged commands, so securing it controls who can perform configuration and admin tasks.

Line types like the console or VTY can require passwords for login, but that only controls who can access the device; after logging in, reaching the privileged commands is determined by the enable password. An Ethernet interface isn’t related to access control for command privilege.