An engineer must protect the password for the VTY lines against over-the-shoulder attacks. Which configuration should be applied?

The `service password-encryption` command encrypts all unencrypted passwords in the running configuration, including those configured for VTY lines, using a weak type 7 encryption, which obfuscates them from casual viewing.

This command configures a username with a type 9 secret password (strong hash) for local user accounts, not directly protecting the VTY line password itself.

This command configures a username with a type 7 secret password (weak encryption) for local user accounts, not directly protecting the VTY line password.

This command sets a plain-text password for the VTY lines, which would be visible in the configuration and vulnerable to over-the-shoulder attacks without `service password-encryption`.