Difficulty: Easy
Correct Answer: enable secret Cisco
Explanation:
Introduction / Context:
Controlling access to privileged EXEC mode on a Cisco router or switch is a key security task. Cisco IOS provides two main commands for this purpose: enable password and enable secret. The enable secret command stores the password in an encrypted form, which is recommended for production environments and is also commonly tested in certification exams.
Given Data / Assumptions:
Concept / Approach:
The correct syntax for configuring the enable secret password is enable secret followed directly by the desired password. The enable secret password is stored using a one way hash in the configuration file, so it is more secure than the clear text enable password. Case matters for the password itself from the user perspective, so Cisco is not the same as cisco when logging in, even though IOS is case insensitive for keywords.
Step-by-Step Solution:
Step 1: Enter global configuration mode with configure terminal from the Router# prompt.Step 2: At the Router(config)# prompt, type enable secret Cisco and press Enter.Step 3: IOS accepts the command and stores an encrypted representation of Cisco in the running configuration.Step 4: Save the configuration to NVRAM using copy running-config startup-config if you want the password to persist across reloads.Step 5: When you later type enable at the user EXEC or privileged EXEC prompt, IOS prompts you for the secret password, and you must enter Cisco exactly with the correct case.
Verification / Alternative check:
After configuring the password, you can use show running-config to verify that an enable secret line exists. You will not see the clear word Cisco but an encrypted value instead, confirming that the secret password was set. Testing by logging out and reentering privileged mode also confirms that Cisco is required.
Why Other Options Are Wrong:
Option A is wrong because the extra word password is not part of the enable secret syntax.Option B sets the secret to cisco (all lowercase), which does not match the specified value Cisco.Option D uses enable password, which configures a clear text password rather than an encrypted secret and is not the recommended secure method.Option E refers to the service password-encryption command, which globally encrypts certain passwords but does not set the enable secret itself.
Common Pitfalls:
Students sometimes confuse enable password and enable secret or ignore case sensitivity in the password. Another mistake is assuming that service password-encryption replaces the need to configure an enable secret. In reality, enable secret is the stronger choice and takes precedence if both are configured.
Final Answer:
The correct command is enable secret Cisco, entered in global configuration mode.
Discussion & Comments