200-301 Question 419
Single answerYou are configuring access control on a Cisco router to restrict unauthorized access. You set up a local password for the console line but notice that users can still access the router without being prompted for a password. What additional step must you take to enforce password protection on the console line?
- A
Use the 'enable secret' command to set a global password.
- B
Apply the 'password' command under the console line configuration mode.
- C
Use the 'login' command under the console line configuration mode.
- D
Enable SSH for secure remote access.
Show answer and explanation
Correct answer: C
Explanation
To enforce password protection on the console line, both the 'password' and 'login' commands must be configured under the console line configuration mode. The 'password' command sets the password, while the 'login' command ensures that the router prompts users for the password during access. Without the 'login' command, the router will not require a password even if one is set.
- A. Incorrect.
The 'enable secret' command sets a password for privileged EXEC mode, which does not enforce password protection on the console line.
- B. Incorrect.
Although the 'password' command sets a password for the console line, it does not enforce the use of the password unless the 'login' command is also applied.
- C. Correct.
The 'login' command under the console line configuration mode enables password checking on the line, ensuring that users are prompted for the password set with the 'password' command.
- D. Incorrect.
Enabling SSH is used for secure remote access, but it does not apply to local console access control.