Cisco Certified Network Associate (CCNA) Practice Exam

What is the command to enable AAA new-model on a Cisco device?

1. aaa authentication login

2. enable

3. config terminal

4. aaa new-model

The correct answer is: aaa new-model

Enabling AAA (Authentication, Authorization, and Accounting) new-model on a Cisco device is done using the command “aaa new-model.” This command enters the AAA mode and allows the device to start using the new AAA functionality, which provides extensive control over user authentication and authorization. The AAA new-model feature centralizes the policies for managing users and their permissions, which enhances security and management. This command must be entered in global configuration mode on the router or switch, after which you can define various AAA features such as login methods, timeout parameters, and user groups. The other choices do not initiate the AAA new-model functionality. "aaa authentication login" sets up authentication methods but does not enable the AAA new-model itself. "enable" and "config terminal" are commands used for accessing privileged EXEC mode and entering global configuration mode, respectively, but they do not pertain to enabling the AAA new-model. Thus, the correct command for enabling this functionality on Cisco devices is “aaa new-model.”