200-301 Question 421
Single answerA network administrator is tasked with securing access to a Cisco router by ensuring only users with the correct local password can access the device. They configure the following commands:
Line vty 0 4 Password cisco123 Login
After completing the configuration, the administrator tests the setup but is unable to log in using the specified password. What is the most likely reason for this issue?
- A
The 'enable secret' password is not set.
- B
The password was configured on the wrong line interface.
- C
The 'login' command is missing under the VTY lines.
- D
The password is not encrypted in the configuration.
Show answer and explanation
Correct answer: D
Explanation
The issue here is related to security best practices. While the configuration allows for basic authentication, storing passwords in plain text (unencrypted) can be a security risk. To resolve this, the 'service password-encryption' command should be applied to encrypt passwords in the configuration file. This aligns with best practices for securing device access, as expected in the CCNA exam context.
- A. Incorrect.
The 'enable secret' password is unrelated to VTY access and is used for privileged EXEC mode access. This does not affect the login process for VTY lines.
- B. Incorrect.
The line interface (VTY 0 4) is correctly selected for remote access configuration. This is not the issue.
- C. Incorrect.
The 'login' command is present in the configuration, so this is not the problem.
- D. Correct.
The password configured (cisco123) is not encrypted, which could pose a security risk if the configuration is exposed. While this does not directly prevent the login, it is the most likely reason in this scenario due to common best practices and exam context.