When defining a Shell Profile for a TACACS+ administrator, which setting ensures the user is placed into privilege level 15 immediately upon login?
Setting the Privilege Level field to 15 in the Shell Profile assigns the maximum TACACS+ privilege directly at authorisation, so the administrator lands in enable mode on login without issuing an enable command. This satisfies the stem's requirement for immediate privilege level 15 placement.
Why this answer
In Cisco ISE's TACACS+ shell profile, the 'Privilege Level' field is the explicit setting that assigns the user's initial privilege level upon login. Setting it to 15 places the administrator directly into privileged EXEC mode without requiring an 'enable' command.
Exam trap
SISE often tests whether candidates know that privilege level is set in the Shell Profile's Privilege Level field, not via custom AV pairs or auto-commands — candidates overcomplicate it by trying to hand-craft priv-lvl attributes.
How to eliminate wrong answers
Option A is wrong because while priv-lvl is the underlying TACACS+ AV pair, ISE exposes it through the dedicated Privilege Level field in the shell profile — manually crafting custom attributes is unnecessary and error-prone. Option B is wrong because Auto-Command runs a command after login (e.g., 'show version') but does not itself elevate privilege; using 'enable 15' as an auto-command is a workaround, not the intended configuration. Option D is wrong because 'Maximum Privilege' is not a valid ISE shell profile setting — privilege is controlled by the Privilege Level field and the command set, not a 'maximum' toggle.