Examkin

Soru

Zorluk: OrtaDevice Access Control and Local Password Authentication

A network administrator is evaluating local password storage mechanisms on a Cisco IOS XE device to align with security hardening standards. Arrange the following Cisco IOS password storage types in order from WEAKEST security protection to STRONGEST security protection.

  1. 1Type 0: Unencrypted plaintext password stored directly in the configuration file
  2. 2Type 7: Obfuscated password encoded using the reversible Cisco Vigenère cipher
  3. 3Type 5: Hashed password created using the MD5 cryptographic hashing algorithm
  4. 4Type 8: Hashed password generated using PBKDF2 with SHA-256 key derivation
  5. 5Type 9: Hashed password generated using the memory-hard scrypt algorithm

Cevap

The correct order from weakest to strongest security protection is: Type 0 (Plaintext), Type 7 (Reversible Vigenère Cipher), Type 5 (MD5 Hash), Type 8 (PBKDF2 with SHA-256), and Type 9 (scrypt Hash).
The correct sequence ranks Cisco IOS password protection from weakest to strongest based on cryptographic robustness: Type 0 is plain text, Type 7 uses a reversible obfuscation cipher, Type 5 uses standard MD5 hashing, Type 8 uses PBKDF2 with SHA-256 key stretching, and Type 9 uses memory-hard scrypt hashing.

Adım Adım Çözüm

1
Identify unencrypted storage types
Type 0 is the weakest because it stores passwords in plain cleartext.
Cleartext offers zero protection against unauthorized configuration viewing.
2
Identify weak obfuscation mechanisms
Type 7 is slightly above Type 0 because it uses a weak, trivially reversible cipher generated by 'service password-encryption'.
Type 7 is simple obfuscation intended to prevent shoulder surfing, not secure password hashing.
3
Identify standard cryptographic one-way hashes
Type 5 uses a one-way MD5 hash.
MD5 is non-reversible, making it significantly stronger than Type 7, though more vulnerable to brute-force attacks compared to modern algorithms.
4
Compare modern key derivation functions
Type 8 uses PBKDF2 with SHA-256, while Type 9 uses the scrypt algorithm.
PBKDF2 (Type 8) provides strong key stretching, but scrypt (Type 9) adds memory hardness, making Type 9 the strongest against specialized hardware brute-force attacks.

Anahtar Kavram

Cisco IOS local password storage algorithm security hierarchy (Type 0 < Type 7 < Type 5 < Type 8 < Type 9).
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Device Access Control and Local Password Authentication

Bu konudan daha fazla soru