What are two drawbacks in assigning user privilege levels on a Cisco router? (Choose two.)

What are two drawbacks in assigning user privilege levels on a Cisco router? (Choose two.)

• Commands from a lower level are always executable at a higher level.
• Assigning a command with multiple keywords allows access to all commands using those keywords.
• Only a root user can add or remove commands.
• Privilege levels must be set to permit access control to specific device interfaces, ports, or slots.
• AAA must be enabled.
  

  Answers Explanation & Hints: Privilege levels may not provide desired flexibility and specificity because higher levels always inherit commands from lower levels, and commands with multiple keywords give the user access to all commands available for each keyword. Privilege levels cannot specify access control to interfaces, ports, or slots. AAA is not required to set privilege levels, but is required in order to create role-based views. The role of root user does not exist in privilege levels.