You're staring at the quiz screen. Question 3 asks about the command to encrypt all plaintext passwords. You know you studied this. Now, you know it. But right now, the options blur together — service password-encryption, enable secret, username admin encrypt — and your mind goes blank.
Been there. We all have.
The 1.4 module quiz on basic device configuration isn't tricky because the concepts are hard. It's tricky because the details look similar under pressure. One wrong flag, one missing keyword, and the answer flips. In real terms, 6. This guide walks through every topic that shows up on that quiz — not just the answers, but why they're the answers — so you walk in calm and walk out done Worth keeping that in mind..
What Is Basic Device Configuration
Basic device configuration is the first real hands-on step in networking. You take a router or switch out of the box — or wipe it back to factory — and make it yours. Which means hostname. Passwords. So banners. On the flip side, interfaces. Management access. The stuff that turns a dumb box into a managed network node.
In the Cisco Networking Academy curriculum, this lives in Module 1, Section 6, Topic 4. The quiz that follows tests whether you can recognize correct syntax, spot misconfigurations, and predict command output. It's not a lab. It's multiple choice, drag-and-drop, and a few "select all that apply" questions designed to catch shallow memorization.
Most students pass the lab. The quiz is where they lose points That's the part that actually makes a difference..
The Scope You're Actually Tested On
Don't over-study. The quiz pulls from a tight set of objectives:
- Initial boot process and setup mode (and why you skip it)
- Hostname and banner configuration
- Password hierarchy: console, vty, enable, enable secret
service password-encryption— what it does and doesn't protect- Interface basics: IP address, subnet mask,
no shutdown, description - Saving configuration:
copy running-config startup-configvswrite memory - Verification commands:
show running-config,show startup-config,show interfaces,show ip interface brief
That's it. Also, no ACLs. No VLANs. No routing protocols. If you're studying DHCP or static routes for this quiz, you're wasting time.
Why It Matters / Why People Care
You might think, "It's just a practice quiz. And the CCNA exam? In real terms, " But the final pulls from the same pool. I'll nail the final.It assumes this is muscle memory.
Every network engineer configures these commands hundreds of times. Consider this: the quiz forces you to internalize syntax before you're on a live device where a typo takes down a management link. Which means enable password cisco stores cleartext. enable secret cisco stores an MD5 hash. That distinction isn't academic — it's the difference between a junior admin who gets audited and one who doesn't Worth knowing..
Also: Cisco exams love "select the best answer.Because of that, " Two options might technically work. Only one follows best practice. The quiz trains you to spot that gap.
How It Works — The Core Concepts Broken Down
The Boot Process and Setup Mode
When a Cisco device boots with no startup-config, it enters setup mode — an interactive script that prompts for hostname, passwords, and interface IPs. Even so, " Answer: It aborts setup and drops you to the CLI. The quiz will ask: "What happens if you press Ctrl+C during setup mode?You then configure manually.
Another favorite: "Why do experienced admins avoid setup mode?In practice, " Because it creates verbose, non-modular configs. Day to day, it doesn't use enable secret. It doesn't encrypt passwords. It's a teaching tool, not a production workflow.
Know the prompt sequence too:
--- System Configuration Dialog ---
Continue with configuration dialog? [yes/no]:
Say no. Always no That's the whole idea..
Hostname and Banners — Small Commands, Big Discipline
hostname R1 — simple. 1R-Core fails. R1-Core works. But the quiz tests naming rules: starts with a letter, no spaces, max 63 characters, hyphens allowed. R1 Core fails.
Banners come in three flavors:
banner motd— Message of the Day. Here's the thing — shows to everyone connecting (console, SSH, Telnet). Also, legal notices go here. -banner login— Shows before login prompt. Now, authentication warnings. -banner exec— Shows after successful login. Internal info for admins.
Delimiters matter. banner motd #Unauthorized access prohibited# — the # is arbitrary. Could be !Practically speaking, , $, ^. In practice, just match opening and closing. Because of that, the quiz loves showing a banner with mismatched delimiters and asking what displays. Answer: nothing — the command rejects.
Password Hierarchy — The One Everyone Mixes Up
This is the highest-yield section. Memorize this table:
| Command | Protects | Encryption | Best Practice |
|---|---|---|---|
enable password cisco |
Privileged EXEC | None (cleartext) | Never use alone |
enable secret cisco |
Privileged EXEC | MD5 (type 5) | Always use this |
line console 0 + password cisco + login |
Console access | None | Add logging synchronous |
line vty 0 4 + password cisco + login |
Remote (Telnet/SSH) | None | Use transport input ssh |
username admin secret cisco |
Local user auth | SHA-256 (type 8/9) | Preferred over line passwords |
Key quiz traps:
enable secretoverridesenable password. On top of that, if both exist,enable secretwins. In real terms, -login localon vty lines tells the device to check the local username database. In practice, -service password-encryptionapplies weak encryption (type 7, reversible) to line passwords andenable password. It does not touchenable secretorusername secret— those already use strong hashes. The older command is ignored. Without it,usernamecommands do nothing for remote access.
Interfaces — Where Syntax Meets Reality
interface gigabitethernet 0/0
`ip address 192.1.Because of that, 1 255. 168.Consider this: 255. 255.
The quiz tests:
- Subnet mask format: dotted decimal (
255.255.255.In real terms, 0) not CIDR (/24) in theip addresscommand no shutdownis required — interfaces are administratively down by defaultdescriptionis optional but tested as "what command adds a label? "speedandduplexdefault to auto.
IPv6 shows up too: ipv6 address 2001:db8:acad::1/64 — note the prefix length is CIDR here. Inconsistent? Yes. In real terms, cisco? Also yes.
