Which command prevents passwords from being stored in the configuration as plaintext on a router or switch?

The correct answer is B. service password-encryption. enable password <string> - Sets the enable password, and stores that password in plaintext in enable secret <string> - Sets the enable password, and stores that password as an md5 hash in service password-encryption - For any passwords in the config that are stored in plaintext,

Submitted by amina.ke· Mar 5, 2026Security Fundamentals

Question

Options

Aenable secret
Bservice password-encryption
Cusername Cisco password encrypt
Denable password

How the community answered

(25 responses)

B
96% (24)
D
4% (1)

Explanation

enable password <string> - Sets the enable password, and stores that password in plaintext in enable secret <string> - Sets the enable password, and stores that password as an md5 hash in service password-encryption - For any passwords in the config that are stored in plaintext, this command changes them to be stored as hashed values instead.

Topics

#Cisco password encryption#configuration security

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice