Examkin

Soru

Zorluk: KolayDevice Access Control and Local Password Authentication

A network administrator wants to encrypt all cleartext passwords stored in a Cisco IOS router's running configuration file, including console line passwords and legacy user passwords. Which global configuration command accomplishes this task?

  1. service password-encryptionCevap
  2. B
    enable secret
  3. C
    security passwords min-length 8
  4. D
    copy running-config startup-config

Cevap

The command 'service password-encryption' globally obfuscates all current and future cleartext passwords in the configuration file using Type 7 encryption.
Executing 'service password-encryption' in global configuration mode instructs Cisco IOS to apply Cisco Type 7 encryption to all stored plain-text passwords in the running configuration, such as those set via 'line console 0' or legacy 'username' commands.

Adım Adım Çözüm

1
Identify the goal
The requirement is to convert existing and future plain-text passwords across line configurations and local accounts into encrypted strings within the running configuration.
By default, commands like 'password' under line configuration or legacy 'username password' store passwords in plain text.
2
Evaluate Cisco IOS commands for configuration-wide password obfuscation
Entering 'service password-encryption' in global configuration mode immediately encrypts all unencrypted passwords using Cisco Type 7 encryption.
This command specifically targets configuration file display security rather than individual authentication modes.

Anahtar Kavram

Cisco IOS Global Password Encryption
Bu soruyu puanla

Konular

Device Access Control and Local Password Authentication

Bu konudan daha fazla soru