Question

A network engineer is configuring ISE TACACS+ device administration for a group of IOS switches. Junior administrators should log in and immediately be placed into privileged EXEC mode (level 15) without typing the 'enable' command or a secondary enable password. Which ISE TACACS+ configuration element must the engineer configure to achieve this?

Accepted Answer

A shell profile with the Default Privilege set to 15 and Maximum Privilege set to 15

Answer

A TACACS+ command set that permits the 'enable' command

Answer

A network device group that maps the switches to privilege level 15

Answer

An authorization profile with a downloadable ACL granting full access