Which command will permit read-only access to a user with physical access to an AOS-CS...

The question involves granting read-only access to a user with physical access to an AOS-CX switch. The task is to identify the correct command set.

Analysis of Options (Assumed Context):Read-only access is typically configured using AAA with a privilege level or role. Option C is assumed to include commands like:

text

Copy

aaa authentication login privilege-mode

user operator password plaintext

This assigns the “operator” role, which provides read-only access.

Option A:Incorrect. Likely uses an incorrect role or privilege level (e.g., admin).

Option B:Incorrect. May configure a role with excessive permissions or invalid syntax.

Option C:Correct. Configures a user with the “operator” role for read-only access.

Option D:Incorrect. Likely includes commands for a different access level or invalid configuration.

Why Option C is Correct:In AOS-CX, the “operator” role provides read-only access, allowing users to view configurations and status (e.g., show commands) without modifying settings. The command user operator password plaintext creates a local user with this role, and aaa authentication login privilege-mode ensures privilege levels are enforced upon login. This configuration is suitable for a user with physical access (e.g., via console or SSH), ensuring they cannot alter the switch, as per HPE Aruba Networking’s AAA security practices.

Relevance to Certification Objectives:

Authentication/Authorization (9%):Configuring AAA for user access control.

Security (10%):Implementing secure management access in customer networks.

Troubleshooting (10%):Ensuring proper user permissions for network management.