Config Command Builder — TechKnowSurge

About this interactive

What you're seeing: a Cisco IOS configuration line with the prompt and the surrounding words already written, and the keyword that does the work left blank for you to type. Seventeen commands cover the whole of this module — naming the device, protecting privileged EXEC mode, enabling SSH, locking down the virtual terminal lines, and posting banners. Why it matters: IOS gives you no menu and no autocomplete you can lean on under exam conditions, and the difference between a device that is secured and one that only looks secured is usually a single missing keyword — a line password with no login to prompt for it, transport input left at all so Telnet is still listening, a banner delimiter that also appears inside the banner text. Recognising the right command in a list is a much weaker skill than producing it, which is why this is typed rather than multiple choice. How to use it: read the prompt in front of each command first — (config)# and (config-line)# tell you which mode the command belongs to, and a good share of the exam questions on this material turn on exactly that. Type every keyword in full; abbreviations a real device would accept are marked wrong here. Capital letters do not matter. Anything you miss shows the keyword it wanted plus a hint explaining what that keyword means and what breaks without it. Eight of the seventeen are drawn each run, so running it twice gives you a different sheet.

What you'll learn

Type the Cisco IOS command that names a device, and undo it with the no form that reverses almost every configuration command
Type the commands that protect privileged EXEC mode, distinguishing the hashed enable secret from the cleartext enable password and from the reversible obfuscation service password-encryption provides
Type the sequence that enables SSH on a device — the hostname and IP domain name RSA key generation depends on, the crypto key generate rsa command, the 2048-bit modulus, and pinning the device to SSH version 2
Type the line-configuration commands that secure the virtual terminal lines — the full 0 15 range, the line password and the login that makes it prompt, login local against the local account database, and transport input ssh to refuse Telnet
Type the banner commands and place the three banners in the order a connection meets them — message of the day, then login, then exec — and identify the delimiter that marks where a banner message starts and ends

Aligned to

Cisco CCNA

5.3 Configure and verify device access control using local passwords

5.4 Describe security password policy elements

4.8 Configure network devices for remote access using SSH

2.8 Describe network device management access

Cisco CCST Cybersecurity

2.5 Implement secure access technologies

Cisco CCST Networking

5.4 Differentiate between different ways to access and collect data about network devices

Key terms

Hostname: The leftmost label in a fully qualified domain name that identifies a specific device or resource on a network.
Global Configuration Mode: A Cisco IOS CLI sub-mode entered from Privileged EXEC Mode using the configure terminal command, indicated by (config)# in the prompt, where device-wide configuration changes are made.
Enable Secret: A Cisco IOS command that sets an MD5-hashed password for privileged exec mode, taking precedence over enable password and stored as a hash in the running configuration.
Service Password-Encryption: A Cisco IOS global configuration command that applies weak reversible encryption to plaintext passwords stored in the running configuration.
Secure Shell: A cryptographic network protocol that provides secure remote login and command execution over an unsecured network.
RSA: An asymmetric encryption algorithm based on the difficulty of factoring large prime numbers, widely used for secure data transmission.
VTY Line: A virtual terminal line on a Cisco device that controls remote access connections such as SSH or Telnet.
Telnet: Telnet is a legacy remote terminal protocol that transmits all data including credentials in cleartext; it is considered insecure and serves as a security training example of why encrypted alternatives like SSH are required.
Message of the Day: A banner configured on a Cisco device that displays a message to all users immediately upon connecting, before the login prompt.
Login Banner: A banner configured on a Cisco device that displays a message after the MOTD but before the username and password prompt.
Delimiter: A character used in Cisco banner configuration to mark the beginning and end of the banner message text.

Topics

Fill In The Blank Interactive

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →