Cisco Certified Network Associate (CCNA) Practice Exam

Which command is used to enable password encryption on a Cisco device?

1. service password-encrypt

2. enable password-encryption

3. encrypt passwords

4. set password encryption

The correct answer is: service password-encrypt

The command "service password-encrypt" is used to enable password encryption on a Cisco device. When this command is executed, it activates an internal feature that automatically encrypts plaintext passwords stored in the device configuration. This is an important security measure to prevent unauthorized access to sensitive information, as plaintext passwords can easily be read if someone gains access to the device's configuration file. Understanding the implications of password encryption is crucial for maintaining the security of networking devices. By using the "service password-encrypt" command, administrators help ensure that even if configuration files are exposed, the actual passwords used will be obscured, making it significantly harder for potential attackers to misuse those credentials. The other choices mentioned do not represent valid commands in Cisco configurations for enabling password encryption. This reinforces the importance of using the correct command syntax and understanding the functionality behind it for effective network management and security practices.