100-490 · Question #16
Which two statements about Telnet and SSH are true? (Choose two.)
The correct answer is A. SSH is a protocol that provides a secure remote access connection to network devices. C. A Telnet network management connection is dropped when a router reboots. SSH, or Secure Shell, is indeed a protocol that provides a secure remote access connection to network devices. It encrypts the data to ensure secure transmission over insecure networks like Telnet connections are not secure and are terminated when a router reboots. This is…
Question
Which two statements about Telnet and SSH are true? (Choose two.)
Options
- ASSH is a protocol that provides a secure remote access connection to network devices.
- BSSH uses the well-known TCP port 23 for its communication.
- CA Telnet network management connection is dropped when a router reboots.
- DTelnet is a protocol that provides a secure remote access connection to network devices.
- ETelnet is preferred over SSH for security reasons.
How the community answered
(37 responses)- A76% (28)
- B8% (3)
- D3% (1)
- E14% (5)
Explanation
SSH, or Secure Shell, is indeed a protocol that provides a secure remote access connection to network devices. It encrypts the data to ensure secure transmission over insecure networks like Telnet connections are not secure and are terminated when a router reboots. This is because Telnet does not have any mechanism to maintain the connection in case of network interruptions or device reboots.
Topics
Community Discussion
7A and C are your two keepers here. SSH was purpose-built to encrypt the control channel between you and the device, so A is straightforwardly true, and that is the core reason it replaced Telnet in any serious environment. C holds because Telnet operates over an in-band TCP session tied to the device's running state, so when the router goes down and comes back up, that session is gone and you reconnect fresh. B is the classic trap, SSH runs on TCP 22, not 23, that port belongs to Telnet, and swapping those two is exactly what the exam writers are counting on.
A and C are dead on. SSH encrypts the session so credentials and commands are never sent in cleartext, and any active Telnet session rides on a raw TCP connection that the router tears down the moment it reloads, so you have to reconnect once it comes back up.
Worth adding that the TCP teardown on reload hits SSH sessions just as hard as Telnet ones, so that part is not really a differentiator, the encryption is the actual reason SSH wins on exams.
Almost clicked B for SSH thinking port 23, then remembered SSH is 22, Telnet is 23, and A and C are the obvious pair.
Good catch on the self-correction, but the real exam skill there is recognizing that 22 and 23 as a consecutive pair is exactly the kind of distractor a question writer loves, so training yourself to pause on consecutive-port options before committing saves you from that trap on the ones you know cold.
B has to be one of them because SSH runs on port 23, that's just how it works, same way Telnet is on 22, and C is the other pick because any active session drops when a router goes down and comes back up, that's basic stuff you see in practice all the time.
Carlos, those ports are actually swapped, SSH is 22 and Telnet is 23, so that eliminates B and puts A in as the correct pair with C.