A network engineer wants to configure console access to a router without using AAA so...

Without AAA, the router can still use the local username database for authentication. To place a user directly into privileged EXEC mode after successful login, the local username can be created with privilege level 15, for example username admin privilege 15 secret < password > , and the console line can use local login. This causes the user to receive privilege level 15 after authentication rather than starting in user EXEC mode and then entering the enable password. Option D is therefore the best answer because it ties the privilege level to the authenticated local user. Option A is wrong because it explicitly uses RADIUS or TACACS+, which contradicts the requirement to avoid AAA. Option B is not valid IOS syntax for achieving this behavior. Option C can set the privilege level for a console line, but it is line-based rather than credential-based and does not specifically satisfy the requirement that the privilege be granted after the user provides the correct login credentials. The ENCOR security concept is local device administration without centralized AAA. References/topics: ENCOR Infrastructure Security, local authentication, console access, privilege levels, username privilege 15, device management.