An auditor examines the device management settings on a Cisco IOS XE switch and observes the following running configuration snippet:
text
service password-encryption
!
username auditor privilege 3 algorithm-type scrypt secret Security2026!
username operator privilege 1 password 0 C1sc0123!
!
line vty 0 4
login local
transport input ssh
Which TWO statements correctly describe the security posture and operational behavior of this configuration? (Select TWO.)
- The auditor account credential uses Type 9 hash storage, which provides strong protection against password cracking via key stretching.Cevap
- The operator account credential will be rendered as weak Type 7 reversible ciphertext in the running configuration.Cevap
- CEnabling 'service password-encryption' automatically upgrades existing 'password' configurations to Type 8 PBKDF2 SHA-256 hashes.
- DThe operator account cannot authenticate over VTY lines because local authentication requires all usernames to be configured with the 'secret' keyword.
Cevap
The auditor account uses strong Type 9 scrypt password hashing, and the operator account cleartext password is obfuscated as Type 7 ciphertext due to service password-encryption.
The configuration correctly demonstrates two password security characteristics: the 'scrypt' algorithm type generates a secure Type 9 hash for the auditor user, while global 'service password-encryption' converts cleartext 'password 0' statements into Type 7 weak reversible obfuscation for display purposes.
Adım Adım Çözüm
Anahtar Kavram
Local User Database Password Storage and Encryption Types