Question

A network administrator configures a TACACS+ device administration policy in ISE for a group of junior engineers. The shell profile assigns a 'Default Privilege' of 1 and a 'Maximum Privilege' of 7. When a junior engineer logs into a Cisco IOS switch and issues the 'enable 7' command, what is the resulting behavior?

Accepted Answer

The engineer is placed at privilege level 1 at login and can escalate up to privilege level 7 using the enable command

Answer

The engineer is automatically placed at privilege level 7 immediately at login without needing the enable command

Answer

The enable command is rejected because Maximum Privilege only applies to command authorization, not enable escalation

Answer

The engineer is denied login entirely because the Default and Maximum Privilege values do not match