Which modes and interfaces can be protected with passwords on Cisco IOS? Select three.

The correct choices for modes and interfaces that can be protected with passwords on Cisco IOS include the VTY interface, the console interface, and the Privileged EXEC mode.

The VTY interface allows remote access to the device over protocols such as Telnet or SSH. By setting a password on the VTY lines, you can secure remote login attempts to prevent unauthorized access.

The console interface is the physical connection to the device. Protecting the console with a password ensures that only authorized individuals can access the device locally, which is crucial for physical security considerations.

Privileged EXEC mode is a level of access that provides command-line capabilities for configuring and monitoring the device. Setting a password for this mode safeguards critical system functions against unauthorized configurations or commands.

The HTTP server interface, while it can have security measures such as authentication, is not typically directly protected by a command-line password in the same way as the other options. Thus, it does not fit within the standard modes/interfaces for password protection in Cisco IOS.