nerdexam
Cisco

100-490 · Question #16

Which two statements about Telnet and SSH are true? (Choose two.)

The correct answer is A. SSH is a protocol that provides a secure remote access connection to network devices. C. A Telnet network management connection is dropped when a router reboots. SSH, or Secure Shell, is indeed a protocol that provides a secure remote access connection to network devices. It encrypts the data to ensure secure transmission over insecure networks like Telnet connections are not secure and are terminated when a router reboots. This is…

Service-Related Knowledge

Question

Which two statements about Telnet and SSH are true? (Choose two.)

Options

  • ASSH is a protocol that provides a secure remote access connection to network devices.
  • BSSH uses the well-known TCP port 23 for its communication.
  • CA Telnet network management connection is dropped when a router reboots.
  • DTelnet is a protocol that provides a secure remote access connection to network devices.
  • ETelnet is preferred over SSH for security reasons.

How the community answered

(37 responses)
  • A
    76% (28)
  • B
    8% (3)
  • D
    3% (1)
  • E
    14% (5)

Explanation

SSH, or Secure Shell, is indeed a protocol that provides a secure remote access connection to network devices. It encrypts the data to ensure secure transmission over insecure networks like Telnet connections are not secure and are terminated when a router reboots. This is because Telnet does not have any mechanism to maintain the connection in case of network interruptions or device reboots.

Topics

#SSH#Telnet#remote access#secure management

Community Discussion

7
Dervla O.Dervla O.Jun 20, 2026

A and C are your two keepers here. SSH was purpose-built to encrypt the control channel between you and the device, so A is straightforwardly true, and that is the core reason it replaced Telnet in any serious environment. C holds because Telnet operates over an in-band TCP session tied to the device's running state, so when the router goes down and comes back up, that session is gone and you reconnect fresh. B is the classic trap, SSH runs on TCP 22, not 23, that port belongs to Telnet, and swapping those two is exactly what the exam writers are counting on.

29
Orla P.Orla P.Jun 14, 2026

A and C are dead on. SSH encrypts the session so credentials and commands are never sent in cleartext, and any active Telnet session rides on a raw TCP connection that the router tears down the moment it reloads, so you have to reconnect once it comes back up.

5
Carlos M.Carlos M.Jun 17, 2026

Worth adding that the TCP teardown on reload hits SSH sessions just as hard as Telnet ones, so that part is not really a differentiator, the encryption is the actual reason SSH wins on exams.

0
Toby R.Toby R.Jun 26, 2026

Almost clicked B for SSH thinking port 23, then remembered SSH is 22, Telnet is 23, and A and C are the obvious pair.

0
Dervla O.Dervla O.Jun 27, 2026

Good catch on the self-correction, but the real exam skill there is recognizing that 22 and 23 as a consecutive pair is exactly the kind of distractor a question writer loves, so training yourself to pause on consecutive-port options before committing saves you from that trap on the ones you know cold.

0
Carlos M.Carlos M.Jun 26, 2026

B has to be one of them because SSH runs on port 23, that's just how it works, same way Telnet is on 22, and C is the other pick because any active session drops when a router goes down and comes back up, that's basic stuff you see in practice all the time.

-2
Dervla O.Dervla O.Jun 27, 2026

Carlos, those ports are actually swapped, SSH is 22 and Telnet is 23, so that eliminates B and puts A in as the correct pair with C.

0
Full 100-490 Practice