Examkin

Soru

Zorluk: KolayDevice Access Control and Local Password Authentication

Place the following Cisco IOS password encryption types in order of security strength, from weakest (least secure) to strongest (most secure).

  1. 1Type 0 (Plaintext unencrypted storage in the running configuration)
  2. 2Type 7 (Vigenère-based weak reversible encryption generated by 'service password-encryption')
  3. 3Type 5 (MD5 hash generated by the 'enable secret' command)
  4. 4Type 9 (scrypt key derivation function hash generated using scrypt algorithm options)

Cevap

The correct order from weakest to strongest security strength is Type 0 (Plaintext), Type 7 (Reversible Vigenère cipher), Type 5 (MD5 hash), and Type 9 (scrypt hash).
The sequence from weakest to strongest begins with Type 0 (unencrypted plaintext). Next is Type 7, which uses weak, reversible Vigenère encryption intended only to stop casual viewing. Type 5 uses a one-way MD5 hash which cannot be mathematically decrypted. Finally, Type 9 uses the modern memory-hard scrypt algorithm to provide maximum protection against high-speed dictionary and brute-force attacks.

Adım Adım Çözüm

1
Identify unencrypted plaintext storage
Type 0 represents completely unencrypted text in the configuration file.
Plaintext offers no protection because anyone viewing the running configuration can read the password.
2
Identify weakly obfuscated passwords
Type 7 is created by 'service password-encryption' using a reversible algorithm.
Type 7 prevents casual shoulder surfing but can be trivially reversed back to plaintext.
3
Identify standard cryptographic hashes
Type 5 relies on the MD5 one-way hash algorithm.
One-way hashes cannot be decrypted back to plaintext, making Type 5 much stronger than Type 7 obfuscation.
4
Identify modern memory-hard password hashes
Type 9 uses the scrypt algorithm for enhanced key derivation.
scrypt is designed to resist hardware-accelerated offline brute-force attacks, making it stronger than MD5.

Anahtar Kavram

Cisco IOS Password Encryption Algorithm Types and Relative Security Strengths
Bu soruyu puanla

Konular

Device Access Control and Local Password Authentication

Bu konudan daha fazla soru