3.5 Device Passwords Flashcards

1
Q

What are the two primary password levels?

A

User mode and privileged mode

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What two types of passwords can you put on user mode?

A

Console password and Virtual terminal password

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does the VTY password mean?

A

Virtual terminal password

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does the console password prevent someone from being able to do?

A

Limits who can access user mode through the console port

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What does the VTY password prevent someone from doing?

A

Restricts who can gain access to user mode through remote access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What mode in the cisco cli allows you to change passwords?

A

Privileged mode

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Describe the Secure privileged exec access password

A

The password that restricts access to privileged exec mode is the most important password that you will set. This can be accomplished using the enable secret global configuration command with the password variable.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Describe the Secure user exec access password

A

The exec mode password controls the ability to switch to configuration modes. There are two passwords that can be used. The enable password is stored in clear text in the config file. The enable secret password is encrypted and stored in the config file. To secure user exec access, the console port needs to be configured properly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Describe the Secure remote Telnet access password

A

The exec mode password controls the ability to switch to configuration modes. There are two passwords that can be used. The enable password is stored in clear text in the config file. The enable secret password is encrypted and stored in the config file. To secure user exec access, the console port needs to be configured properly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does the command Router(config)#enable secret password do

A

Sets the encrypted password used for privileged mode access. The enable secret should always be used if it exists.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What does the command Router(config)#enable password password do

A

Sets the unencrypted password for privileged mode access. This password is used if enable secret is not set.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does the command Router(config)#Line console interface do

A

This global config command allows a user to enter console configuration mode. The zero identifies the console interface (usually there is only one.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does the command Router(config)#Line vty vty line 0 15 do

A

This global config command allows a user to enter line VTY mode.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does the command Router(config-line)#Login do

A

VTY access can be enabled using the login command.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What does the command Router(config-line)#no enable secret
Router(config-line)#no enable password
Router(config-line)#no login
Router(config-line)#no password do

A

Removes the password. The no login command disables password checking.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What does the command Service-password-encryption do

A

provides a basic level of encryption to all unencrypted passwords within the config file.

17
Q

What are the requirements for passwords on cisco devices?

A

Do not use the same password for all devices.
Do not use the same password for both your enable and enable secret passwords.
Passwords should be more than 8 characters long
Common words should not be used in passwords
Use a combination of letters, numbers, and symbols

18
Q

What is the first step in Password recovery?

A

Access ROMMON mode on your device. ROMMON mode can be accessed via a console by using a break sequence during the boot up process. Removing external flash memory while the device is turned off will also cause a device to boot in ROMMON mode.

19
Q

What is the second step inn Password recovery

A

Use the confreg 0x2142 command to set the configuration register to 0x2142 so the device will ignore the startup config file when the device is rebooted.

20
Q

What is the third step in password recovery

A

Use the reset command to restart the device.

21
Q

What is the fourth step in password recovery

A

When the device has finished restarting, copy the startup configuration file to the running configuration file using the copy startup-config running-config command.

22
Q

What is the fifth step in password recovery

A

Save updated configuration.

23
Q

What is the sixth step in password recovery

A

Configure all required passwords.

24
Q

what is the seventh step in password recovery

A

Use the confreg 0x2102 command to change the configuration register back to 0x2102 so the device will look to the startup config file on restart.

25
Q

What is the eighth step in password recovery

A

Reset the device. Upon restart, the device will use the reconfigured passwords to authenticate the user.

26
Q

What is the last step in password recovery

A

Use the show command to ensure that all changed configurations have been saved correctly.

27
Q

What command makes the cisco device ignore the startup config file when the device is rebooted?

A

confreg 0x2142

28
Q

After configuring a router to ignore the startup configuration when the device boots, what command would you use to tell the device to load the startup configuration upon boot?

A

confreg 0x2102