nerdexam
Cisco

200-301 · Question #246

The service password-encryption command is entered on a router. What is the effect of this configuration?

The correct answer is A. restricts unauthorized users from viewing clear-text passwords in the running configuration. The service password-encryption command configures a router to apply a weak, reversible encryption to all clear-text passwords stored in its running and startup configurations.

Submitted by brentm· Mar 5, 2026Security Fundamentals

Question

The service password-encryption command is entered on a router. What is the effect of this configuration?

Options

  • Arestricts unauthorized users from viewing clear-text passwords in the running configuration
  • Bprevents network administrators from configuring clear-text passwords
  • Cprotects the VLAN database from unauthorized PC connections on the switch
  • Dencrypts the password exchange when a VPN tunnel is established

How the community answered

(30 responses)
  • A
    87% (26)
  • B
    7% (2)
  • C
    3% (1)
  • D
    3% (1)

Why each option

The `service password-encryption` command configures a router to apply a weak, reversible encryption to all clear-text passwords stored in its running and startup configurations.

Arestricts unauthorized users from viewing clear-text passwords in the running configurationCorrect

This command encrypts all plain-text passwords, such as those configured for console lines, VTY lines, and enable passwords, within the router's configuration files, preventing their easy viewing by unauthorized users accessing the configuration.

Bprevents network administrators from configuring clear-text passwords

The command encrypts passwords once configured in plain text; it does not prevent administrators from *typing* passwords in clear text during configuration.

Cprotects the VLAN database from unauthorized PC connections on the switch

This command relates to password security on the router's command-line interface and configuration, not to VLAN database protection or switch port security features.

Dencrypts the password exchange when a VPN tunnel is established

This command encrypts passwords stored locally on the device; it does not encrypt password exchanges or authentication traffic during the establishment of a VPN tunnel, which relies on cryptographic protocols like IPsec.

Concept tested: Router password encryption

Source: https://www.cisco.com/c/en/us/td/docs/ios/security/security_cfg/configuration/guide/scf_ios_xe_chap-3.html

Topics

#Cisco IOS security#Password encryption

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice