Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) · Cisco
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Type 0: Plain text (least secure). Type 7: Weak reversible encryption (deprecated). Type 5: MD5 hash (older, still used but considered weaker). Type 8: PBKDF2-SHA256 (stronger than MD5). Type 9: Scrypt (strongest currently supported).
Use Type 6, Type 8 and Type 9 wherever possible. Type 0, Type 5 and Type 7 should be migrated to other stronger methods. Type 5 These use a salted MD5 hashing algorithm. These should only be used if Type 6, 8, or 9 is not available on the IOS version you are running. Attempting to use Type 5 in modern IOS XE will throw an error as these will be depreciated soon. In the running config these start with $5$. Type 9 These use the SCRYPT hashing algorithm defined in the informational RFC 7914. SCRYPT uses 80-bit salt, 16384 iterations. It’s very memory expensive to run the algorithm and therefore difficult to crack. Running it once occasionally on a Cisco device is fine though, this is currently the Best Practice Type password to use. I have not proven it but I believe it is possible that the popular tool HashCat is able to decrypt these. In the running config standard Type 9 start with $9$. In the running config convoluted Type 9 start with $14$. https://community.cisco.com/t5/networking-knowledge-base/understanding-the-differences-between-the-cisco-password-secret/ta-p/3163238
Guys, the question is asking for a strongest password for authentication, what if the hash from option A and B are actually generated using a weak password, for example P@ssw0rd?