After entering the command service passwordencryption you no

After entering the command service password-encryption, you notice all passwords appear in encrypted format within the configuration. You then issue a no service password-encryptioncommand and save the configuration. The next day, a peer changes the password on the console line, using the command password Cisco. After executing a show running-config, which of the following would be true?

A. All passwords, except for the enable secret, will display in clear text.

B. All passwords, including the enable secret, will display in clear text.

C. All passwords will continue to display in encrypted format.

D. The console password will display in clear text; all others will display encrypted.

Solution

D is correct. After service password-encryption has been entered into a configuration, all passwords will remain in encrypted format, even if no service password-encryption is entered later. However, if a password is changed after that, it will display in clear text.

A, B, and C are incorrect. A and B are incorrect because the encrypted versions of the passwords will remain after no service password-encryption until they are changed. The enable secret always displays in encrypted format, regardless. C is incorrect because changing a password after no service password-encryption results in a new clear-text entry in the config.