After enabling 'service password-encryption' on a Cisco router, which type of password is encrypted in the running configuration?

Line passwords configured with the 'password' command

Local username passwords configured with the 'secret' keyword

A security audit requires that all passwords in the running configuration be encrypted. The router has an 'enable secret' and a console line password. The admin runs 'service password-encryption'. Which statement is true about the effect on the configuration?

The enable secret is encrypted, but the console line password remains plaintext.

Neither password is affected because 'service password-encryption' only affects new passwords.

Both the console line password and the enable secret are encrypted.

The console line password is encrypted, but the enable secret remains hashed.

An admin is troubleshooting why a user cannot authenticate to a switch via SSH. The VTY lines have 'login local' configured, and a local user 'admin' exists. Which command would verify that the local user account is properly configured?

show running-config | include username

An admin needs to verify that the VTY lines on a switch are configured to require a password for remote access. Which command provides the most direct confirmation of the authentication method applied to the VTY lines?

show running-config | section line vty

CiscoCertified Network Associate (CCNA)

Domain 5Objective 3

5.3 Configure and Verify Device Access Control Using Local Passwords 200-301 Practice Questions (Page 3)

Part of the Security Fundamentals domain, which accounts for 15% of the 200-301 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

6concepts

15%of the exam

Questions 11–15

11foundation · easy
After enabling 'service password-encryption' on a Cisco router, which type of password is encrypted in the running configuration?
Select an answer first
12expert · hard
A security audit requires that all passwords in the running configuration be encrypted. The router has an 'enable secret' and a console line password. The admin runs 'service password-encryption'. Which statement is true about the effect on the configuration?
Select an answer first
13expert · medium
A network administrator is configuring VTY lines for remote access. The administrator wants to require both a username/password for SSH and a separate password for privileged EXEC access. The administrator has already created a local user and configured enable secret. Which additional configuration is needed on the VTY lines?
Select an answer first
14application · medium
An admin is troubleshooting why a user cannot authenticate to a switch via SSH. The VTY lines have 'login local' configured, and a local user 'admin' exists. Which command would verify that the local user account is properly configured?
Select an answer first
15application · medium
An admin needs to verify that the VTY lines on a switch are configured to require a password for remote access. Which command provides the most direct confirmation of the authentication method applied to the VTY lines?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-301

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-301” is a trademark of its owner, used for identification only.