200-301 Question #1219: Real Exam Question with Answer & Explanation

The correct answer is A: service password-encryption. The global configuration command service password-encryption encrypts all plain-text passwords in the Cisco IOS router's running and startup configurations.

Submitted by jordan8· Mar 5, 2026

Question

Which global command encrypts all passwords in the running configuration?

Options

Aservice password-encryption
Benable password-encryption
Cenable secret
Dpassword-encrypt

Explanation

The global configuration command service password-encryption encrypts all plain-text passwords in the Cisco IOS router's running and startup configurations.

Common mistakes.

B. enable password-encryption is not a valid command in Cisco IOS for encrypting all passwords.
C. enable secret is used to set the enable password with a strong, irreversible (MD5 or SHA256) hash, but it only applies to that specific password and does not encrypt other passwords in the configuration.
D. password-encrypt is not a valid command in Cisco IOS for encrypting passwords.

Concept tested. Cisco IOS password encryption command

Reference. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/secure_http_server/configuration/15-mt/sec-http-serv-15-mt-book/sec-http-serv-pass-enc.html

Topics

#Cisco password encryption#Running configuration security#CLI global commands

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice Browse All 200-301 Questions