CiscoCertified Network Associate (CCNA)
Domain 5Objective 3
5.3 Configure and Verify Device Access Control Using Local Passwords 200-301 Practice Questions (Page 4)
Part of the Security Fundamentals domain, which accounts for 15% of the 200-301 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)
23questions here
5free pages
6concepts
15%of the exam
Questions 16–20
- 16
Which command should be used to set a secure enable password that is stored as a one-way hash?
Select an answer first - 17
A security audit reveals that the enable password on a router is stored as a weak hash. The admin wants to use a stronger hashing algorithm for the privileged EXEC password. Which command should be used?
Select an answer first - 18
Which command shows the status and configuration of the console and VTY lines, including whether they are configured for login?
Select an answer first - 19
A network administrator is configuring a router for remote management. The administrator wants to require a username and password for SSH access, and also wants to ensure that after authentication, the user must enter a separate password to enter privileged EXEC mode. The administrator has already created the local username. What additional configuration is needed?
Select an answer first - 20
A network admin is configuring a new switch for remote management. The company policy requires that each administrator have a unique username and password, and that authentication be enforced on the VTY lines. The admin has already created the local user accounts. Which configuration command is required on the VTY lines to enforce local authentication?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-301” is a trademark of its owner, used for identification only.