Exam 200-301 All Questions

View all questions & answers for the 200-301 exam

Exam 200-301 topic 1 question 984 discussion

Actual exam question from Cisco's 200-301

Question #: 984
Topic #: 1

Refer to the exhibit. Local access for R4 must be established and these requirements must be met:
• Only Telnet access is allowed.
• The enable password must be stored securely.
• The enable password must be applied in plain text.
• Full access to R4 must be permitted upon successful login.

Which configuration script meets the requirements?

A. !
conf t
!
username test1 password testpass1
enable secret level 15 0 Test123
!
line vty 0 15
login local
transport input telnet
B. !
config t
!
username test1 password testpass1
enable password level 15 0 Test123
!
line vty 0 15
login local
transport input all
C. !
config t
!
username test1 password testpass1
enable password level 1 7 Test123
!
line vty 0 15
accounting exec default
transport input all
D. !
config t
!
username test1 password testpass1
enable secret level 1 0 Test123
!
line vty 0 15
login authentication
password Test123
transport input telnet

Show Suggested Answer

Suggested Answer: A 🗳️

by ac89l at May 13, 2023, 1:31 p.m.

Comments

Submit Cancel

Friday_Night

Highly Voted 2 years, 2 months ago

how is enable secret command be plain text?

upvoted 12 times

XuniLrve4

2 years, 1 month ago

They are asking when configure it enters as plain text and is encrypted when shown in running-config

upvoted 4 times

...

Lse

Most Recent 6 months, 1 week ago

Selected Answer: A

enable secret level 15 0 Test123 "0" indicates that the password is being stored in cleartext, which means it’s not encrypted in the configuration file. use of "enable secret" itself ensures that the password is encrypted when used by the system. - in practice I did noticed, "enable secret" always HASHED password in the running-config, not human readable.

upvoted 1 times

...

omle2

10 months, 1 week ago

A "must be applied in plain text." and "enable secret" contradict each other.

upvoted 2 times

Arkv

9 months ago

No it does not. You are applying the password in plain text but it is stored securely.

upvoted 2 times

...

Carlolo

1 year, 9 months ago

D is wrong as you won't get full access to the router with level 1 and password will be encrypted with the secret keyword

upvoted 1 times

...

mda2h

1 year, 12 months ago

Selected Answer: A

Possible solutions are A and D. D has login authentication => tells switch to use aaa to authenticate => wrong cause we cant local access Thus A is correct

upvoted 1 times

...

4aynick

2 years, 2 months ago

correct

upvoted 2 times

...

ac89l

2 years, 2 months ago

Can anyone validate this please?

upvoted 2 times

XuniLrve4

2 years, 1 month ago

There are only two options firstly that only permit telnet alone A,D, and the only other option is "D" and it has plain text password w no encryption. Hope this helps.

upvoted 2 times

...