Free Cisco 300-410 ENARSI Actual Exam Questions - Question 14 Discussion
A client is concerned that passwords are visible when running this show archive log config all.
Which router configuration is needed to resolve this issue?
It’s C because service password-encryption applies globally and will at least scramble passwords so they’re not in clear text anywhere, not just in archive logs. That’s a safer bet than just hiding keys.
A/D? Option A encrypts the passwords specifically, which means they won’t show in plain text at all, while D just hides them from display but might not encrypt. Depends if you want encryption or just hiding.
Maybe A works too since it encrypts passwords specifically for archive log config, which should prevent them from showing in plain text when running the command. D is good, but A targets encryption directly.
A hiding keys directly sounds like the best fix for showing passwords in archive logs, so D fits the problem more exactly than just encrypting passwords everywhere.
Makes sense to go with D since it targets hiding keys in archive logs directly, no extra encryption needed here. D
Option D seems right because hidekeys is designed specifically to mask passwords in archive log outputs, which fits the issue here better than the other commands.
Maybe C, since service password-encryption is a common way to stop plain text passwords from showing up in configs. It’s a simple fix without messing with other settings.
D imo, since "hidekeys" is specifically meant to hide passwords in the archive log config output, which directly addresses the issue without changing encryption methods globally.
Is there info about the IOS version? Some commands like "hidekeys" depend on that, so it's hard to pick without knowing exact software details.