How does using the service password-encryption command on a router provide additional security?

Question

Options

• Aby encrypting all passwords passing through the router
• Bby encrypting passwords in the plain text configuration file
• Cby requiring entry of encrypted passwords for access to the device
• Dby configuring an MD5 encrypted key to be used by routing protocols to validate routing exchanges
• Eby automatically suggesting encrypted passwords for use in configuring the router

• B
  88% (23)
• D
  4% (1)
• E
  8% (2)

Explanation

The service password-encryption command applies a weak, reversible Cisco proprietary algorithm (Type 7) to plaintext passwords stored in the running-config and startup-config files. Without this command, passwords configured with commands like password or enable password appear in clear text when the config is displayed. This protects against casual shoulder-surfing or unauthorized viewing of a saved config file. It does NOT encrypt passwords as they traverse the network (A), does not require users to enter pre-encrypted passwords (C), does not use MD5 for routing protocol authentication (D)-that is the key chain / ip ospf message-digest-key mechanism-and does not suggest passwords (E). Note that Type 7 encryption is considered weak and easily reversible; enable secret uses the stronger MD5-based Type 5 hash.

No community discussion yet for this question.