A network administrator needs to secure privileged EXEC mode on a Cisco IOS switch. Which command should be used to store the password in the configuration file using a strong, non-reversible hashing algorithm?
The correct answer is the enable secret command. This command stores the privileged EXEC mode password in the configuration file as a salted MD5 hash (Type 5), which is a strong, non-reversible hashing algorithm. The enable password command is less secure because it stores the password in plain text by default. The service password-encryption command applies a weak, reversible encryption (Type 7) to otherwise plaintext passwords, but it does not provide the same level of security as enable secret. The line console 0 and password commands are used to set the console line password, not the privileged EXEC mode password.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the difference between 'enable password' and 'enable secret'?
Open an interactive chat with Bash
What does MD5 encryption mean in the context of Cisco devices?
Open an interactive chat with Bash
How can I view the configuration file on a Cisco device to check password storage?
Open an interactive chat with Bash
Cisco CCNA 200-301
Security Fundamentals
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access