Which command enables global password encryption?

Which command enables global password encryption?

• A. enable secret
• B. enable password
• C. password 7
• D. service password-encryption

Answer: (D)

Global password encryption changes how passwords are stored in the device configuration by turning all plaintext passwords into an encrypted form across the whole configuration. The command to enable this across the device is service password-encryption. Once enabled, passwords like enable password and line passwords are saved in an encrypted (type 7) form, so they aren’t visible in plain text when you view or save the config. This is different from enable secret, which uses its own hash and isn’t a global encryption toggle. Per-password options like password 7 would only apply to the one entry you configure, not enable a broad, device-wide encryption setting. So, the global switch you want is the command that activates encryption for all stored passwords.

Global password encryption changes how passwords are stored in the device configuration by turning all plaintext passwords into an encrypted form across the whole configuration. The command to enable this across the device is service password-encryption. Once enabled, passwords like enable password and line passwords are saved in an encrypted (type 7) form, so they aren’t visible in plain text when you view or save the config. This is different from enable secret, which uses its own hash and isn’t a global encryption toggle. Per-password options like password 7 would only apply to the one entry you configure, not enable a broad, device-wide encryption setting. So, the global switch you want is the command that activates encryption for all stored passwords.