5.3 Configure and Verify Device Access Control Using Local Passwords 200-301 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A junior admin configured a router with 'enable secret' and 'enable password', then set a plaintext password on the console line. The admin wants to ensure that no plaintext passwords appear in the running configuration. Which additional command is required?

   • Aenable secret
   • Bservice password-encryption
   • Clogin local
   • Dno enable password
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   If both 'enable password' and 'enable secret' are configured on a Cisco router, which password is used to access privileged EXEC mode?

   • AThe 'enable password' password
   • BThe router prompts for either password
   • CThe 'enable secret' password
   • DBoth passwords are required
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A junior administrator configured local usernames and line passwords on a router. A security review shows that the running configuration displays all passwords in plaintext. The administrator wants to protect these passwords from casual viewing without changing the authentication method. What should the administrator do?

   • AUse the show running-config command to verify.
   • BReplace all passwords with enable secret.
   • CIssue the service password-encryption command.
   • DUse the login local command on all lines.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of the 'service password-encryption' command on a Cisco device?

   • ATo encrypt all passwords in the running configuration using a reversible algorithm
   • BTo prevent users from viewing the running configuration
   • CTo encrypt passwords only when they are transmitted over the network
   • DTo hash all passwords using a one-way cryptographic hash
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company wants to allow only specific administrators to access a router via SSH. Each admin has a unique local username and password. The VTY lines currently have 'login' configured. What change is needed to enforce per-user authentication?

   • AReplace 'login' with 'login local' on the VTY lines.
   • BConfigure 'enable secret' and keep 'login'.
   • CAdd 'password' under the VTY lines and keep 'login'.
   • DAdd 'username' commands for each admin and keep 'login'.
   Reveal Solution Discussion Select an answer first