Cisco Certified Network Associate (CCNA) Group Practice Exam

Unlock all questions

This demo includes only 20 questions. Upgrade to access hundreds of questions, flashcards, exam simulations, and disable ads.

Full question bankExam simulationsFlashcards

From $25.99Unlock all

Session length

1 / 20

What does the service password-encryption command accomplish?

This command encrypts passwords as they are transmitted across serial WAN links.

This command prevents someone from viewing the running configuration passwords.

Obfuscating passwords stored in the device’s configuration is what this command does. It applies a reversible, but weak, type 7 encryption to plaintext passwords in the running configuration, so they don’t appear in clear text when you view the config. This helps prevent casual onlookers from reading passwords, but it’s not strong cryptography and can be decrypted easily. It doesn’t protect passwords in transit across a network, which would require SSH or other secure transport. It doesn’t change how the enable secret is stored, and it doesn’t automatically rewrite passwords in NVRAM immediately—you must save the configuration for the startup-config in NVRAM to reflect the encrypted values.

This command enables a strong encryption algorithm for the enable secret password command.

This command automatically encrypts passwords in configuration files that are currently stored in NVRAM.