200-301 · Question #643
An administrator must use the password complexity not manufacturer-name command to prevent users from adding "cisco" as a password. Which command must be issued before this command?
The correct answer is A. Password complexity enable. Before configuring specific password complexity rules, such as preventing manufacturer names, the global password complexity feature must first be enabled.
Question
Options
- APassword complexity enable
- Bconfreg 0x2142
- CLogin authentication my-auth-list
- Dservice password-encryption
How the community answered
(36 responses)- A86% (31)
- B8% (3)
- C3% (1)
- D3% (1)
Why each option
Before configuring specific password complexity rules, such as preventing manufacturer names, the global password complexity feature must first be enabled.
The `password complexity enable` command globally activates the password complexity feature on the Cisco device, allowing subsequent commands like `password complexity not manufacturer-name` to enforce specific complexity policies. Without enabling this feature, any defined complexity rules would not take effect.
`confreg 0x2142` is used to change the configuration register, typically for password recovery or boot sequence modification, and has no direct relation to password complexity features.
`login authentication my-auth-list` configures an authentication method list for login, which is separate from defining password complexity rules for user passwords.
`service password-encryption` encrypts passwords in the running configuration, but it does not enforce any password complexity rules themselves.
Concept tested: Password complexity configuration
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/d1_sec_login_mgmnt/configuration/xe-3s/sec-login-mgmnt-xe-3s-book/sec-pw-complx.html
Topics
Community Discussion
No community discussion yet for this question.