ccna 200-301 objectives pdf

ccna 200-301 objectives pdf.The noexec command can be used in line configuration mode to disable the EXEC process for a specific line (such as an auxiliary port). This command allows only outgoing connections on the line. This command allows you to disable the EXEC process for a connection if there is a connection that intends to send unsolicited data to the router.Encrypt All PasswordsBy default, all passwords for Cisco routers are stored in plaintext in the router's startup and runtime configuration files, except for the password generated by enable secret password. However, these passwords can be encrypted in global configuration mode using the service password-encryption command. This command encrypts all current and future plaintext passwords in the configuration file as ciphertext.The service password-encryption command is primarily used to prevent unauthorized users from viewing the passwords in the configuration file. The algorithm used by the service password-encryption command is simple enough that an attacker can easily crack it in reverse using the encrypted ciphertext and a password-cracking program. For this reason, it cannot be used to protect against more serious attacks against the configuration file.To stop encrypting passwords, use the no form of the above command. Only passwords created after the no command is executed will not be encrypted. Previously encrypted passwords remain in encrypted form. The enablesecret command is more secure because it uses a hash algorithm to encrypt passwords.2.1.2.4 Configuring Secure Local Database EntriesTo increase the security of authentication rather than security by password alone, the local and remote access lines can be configured to use a combination of passwords and commands. To do this, create local database entries on each device so that they contain a combination of username and password, and configure the local and remote access lines to point to the local database when authenticating users.There are two line configuration mode commands that can be used to create local database entries.username name password passwordusername name secret password