Examkin

Question

Difficulty: MediumDevice Access Control and Local Password Authentication

A network security administrator needs to configure a local database user account named 'opsman' on a Cisco IOS XE router. The requirement specifies using PBKDF2 with SHA-256 hashing (Type 8 encryption) to securely store the plaintext password 'Secur3#Pass2026'. Which Cisco IOS global configuration command correctly satisfies this requirement?

  1. username opsman secret algorithm-type pbkdf2 Secur3#Pass2026Answer
  2. B
    username opsman password algorithm-type pbkdf2 Secur3#Pass2026
  3. C
    username opsman secret 8 Secur3#Pass2026
  4. D
    service password-encryption algorithm pbkdf2

Answer

The command 'username opsman secret algorithm-type pbkdf2 Secur3#Pass2026' correctly configures the local account with PBKDF2 (Type 8) password hashing.
In Cisco IOS XE, creating a local database user account with PBKDF2 hashing (Type 8) from a cleartext string requires the syntax 'username <name> secret algorithm-type pbkdf2 <plaintext_password>'. The router automatically computes the SHA-256 PBKDF2 hash and stores it in the running configuration as a Type 8 secret.

Step-by-Step Solution

1
Identify the target requirement
The goal is to configure a local user secret using PBKDF2 (Type 8 encryption) from a cleartext input password on Cisco IOS XE.
Cisco IOS XE supports enhanced password hashing algorithms via the 'secret' command branch.
2
Evaluate Cisco IOS XE syntax rules for local user database creation
The 'username <name> secret algorithm-type <type> <password>' syntax is used to define cleartext passwords hashed with specific algorithms such as pbkdf2 or scrypt.
Using 'secret algorithm-type pbkdf2' specifies Type 8 SHA-256 PBKDF2 hashing.
3
Differentiate from incorrect options
The 'password' keyword cannot take hashing algorithms, the literal number '8' expects an already computed hash string, and 'service password-encryption' is a global command for legacy Type 7 encryption.
Syntax elements must match the command state and input format expected by IOS XE.

Key Concept

Local database user authentication and password hashing algorithms (Type 5 MD5, Type 8 PBKDF2, Type 9 scrypt, Type 7 service password-encryption).
Rate this question

Topics

Device Access Control and Local Password Authentication

More questions from this topic