ccna 200-301 official cert guide reddit

ccna 200-301 official cert guide reddit.2.2.1 Configuring Privilege Levels2.2.1.1 Restricting the availability of commandsWhen an administrator can securely connect and manage devices, there is still a significant amount of configuration work that needs to be done to maintain the security of the network. For example, whether to assign a privilege level to2.2 Assigning Administrative Roles 35 all employees of the company provide full access? The answer to this question is usually no. Because most employees in a company only need access to specific parts of the network. So should you provide full access to all employees in the IT department? IT departments in large companies have many different jobs, such as chief information officers (CIOs), security operations officers, network administrators, WAN engineers, LAN administrators, software administrators, PC tech support and help desk support, and not all jobs have the same level of access to the infrastructure. Imagine if a senior network administrator went on vacation and as a precautionary measure, provided the junior administrator with privileged EXEC passwords for all base devices. A few days later, this curious junior administrator might accidentally disable the company's network. This scenario is common because routers are typically protected with only one privileged EXEC mode passwordwhich is commonplace. Anyone who has this password can access the entire router. The next step for the system administrator in protecting the network is to configure the privilege level. The privilege level determines who is allowed to connect to the device and who can operate the device. The Cisco 10S Software CLI has two access levels.User EXEC mode (privilege level 1)-Provides the lowest user EXEC mode, with only user-level commands available at the router> prompt.Privileged EXEC mode (privilege level 15)-includes all enable levels at the router# prompt(enable-level) command. While these two levels can provide control, there are times when more precise control is needed. CiscoIOS software provides two methods of accessing the access base device: privileged level and role-based CLIo2.2.1.2 Privilege LevelsCisco routers allow administrators to configure multiple privilege levels. Configuring privilege levels is particularly useful in a help desk environment where some administrators must be able to configure and monitor every part of the router (level 15), while other administrators may only need to monitor the router without configuration (customizable level 2.14). There are 16 levels in total, where 0, 1, and 15 are pre-defined.