What does session inactivity ensure?

• A. Always disabled.
• B. Only applies to console sessions.
• C. Inactivity timers and timeout lengths are set in accordance with local command policy.
• D. Does not affect security.

Answer: (C)

Session inactivity is a security mechanism that ends an idle session after a period of no activity to prevent unauthorized access. The crucial point is that the actual timeout values are defined by the local command policy, not by the feature alone. This means the inactivity timers and how long a session can stay open are set to match organizational requirements, and they can be adjusted as policies change. If the policy requires logout after a certain idle time, the device enforces that; otherwise it uses the configured policy. It isn’t always disabled, it isn’t limited to just console sessions, and it does affect security by reducing the window of opportunity for someone to misuse an unattended session.