A network admin is configuring a router for local authentication on the console line. The admin wants to ensure that the password is not stored in plaintext in the running configuration. Which set of commands achieves this?

username admin password cisco123 and service password-encryption

enable secret cisco123 and service password-encryption

username admin secret cisco123 and service password-encryption

line console 0 → password cisco123 → login local

A router has both 'enable password Cisco123' and 'enable secret Cisco456' configured. An administrator is trying to enter privileged EXEC mode but is failing. The admin is certain that the password 'Cisco456' is correct. Which command would verify which password is actually being used?

show running-config | include enable

A router has both enable secret and enable password configured. The enable secret is 'StrongSecret' and the enable password is 'WeakPassword'. A network administrator wants to ensure that only the hashed secret is used for privileged EXEC access. What should the administrator do?

Issue the service password-encryption command.

Do nothing because enable secret already takes precedence.

Change the enable password to match the enable secret.

Remove the enable password command.

CiscoCertified Network Associate (CCNA)

Domain 5Objective 3

5.3 Configure and Verify Device Access Control Using Local Passwords 200-301 Practice Questions (Page 1)

Part of the Security Fundamentals domain, which accounts for 15% of the 200-301 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

6concepts

15%of the exam

Questions 1–5

1application · medium
A network admin is configuring a router for local authentication on the console line. The admin wants to ensure that the password is not stored in plaintext in the running configuration. Which set of commands achieves this?
Select an answer first
2foundation · easy
Which configuration mode is required to set a password on the console line of a Cisco switch?
Select an answer first
3foundation · easy
A network administrator wants to require users to enter a username and password that are stored locally on the router when accessing the VTY lines. Which command should be applied to the VTY lines?
Select an answer first
4expert · hard
A router has both 'enable password Cisco123' and 'enable secret Cisco456' configured. An administrator is trying to enter privileged EXEC mode but is failing. The admin is certain that the password 'Cisco456' is correct. Which command would verify which password is actually being used?
Select an answer first
5expert · medium
A router has both enable secret and enable password configured. The enable secret is 'StrongSecret' and the enable password is 'WeakPassword'. A network administrator wants to ensure that only the hashed secret is used for privileged EXEC access. What should the administrator do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-301

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-301” is a trademark of its owner, used for identification only.

5.3 Configure and Verify Device Access Control Using Local Passwords 200-301 Practice Questions (Page 1)

Questions 1–5

A network admin is configuring a router for local authentication on the console line. The admin wants to ensure that the password is not stored in plaintext in the running configuration. Which set of commands achieves this?

Which configuration mode is required to set a password on the console line of a Cisco switch?

A network administrator wants to require users to enter a username and password that are stored locally on the router when accessing the VTY lines. Which command should be applied to the VTY lines?

A router has both 'enable password Cisco123' and 'enable secret Cisco456' configured. An administrator is trying to enter privileged EXEC mode but is failing. The admin is certain that the password 'Cisco456' is correct. Which command would verify which password is actually being used?

A router has both enable secret and enable password configured. The enable secret is 'StrongSecret' and the enable password is 'WeakPassword'. A network administrator wants to ensure that only the hashed secret is used for privileged EXEC access. What should the administrator do?

Keep studying — Security Fundamentals