nerdexam
Cisco

200-301 · Question #1574

Refer to the exhibit. An engineer executed the script and added commands that were not necessary for SSH and must now remove the commands. Which two commands must be executed to correct the configurat

The correct answer is C. no service password-encryption D. no ip name-server 198.51.100.210. To remove commands unnecessary for SSH, the engineer should eliminate configuration for password encryption and DNS name servers, as these are not direct requirements for SSH functionality.

Submitted by lucia.co· Mar 5, 2026Security Fundamentals

Question

Refer to the exhibit. An engineer executed the script and added commands that were not necessary for SSH and must now remove the commands. Which two commands must be executed to correct the configuration? (Choose two.)

Exhibits

200-301 question #1574 exhibit 1
200-301 question #1574 exhibit 2

Options

  • Ano ip domain name ccna.cisco.com
  • Bno login local
  • Cno service password-encryption
  • Dno ip name-server 198.51.100.210
  • Eno hostname CPE

How the community answered

(65 responses)
  • A
    3% (2)
  • B
    14% (9)
  • C
    77% (50)
  • E
    6% (4)

Why each option

To remove commands unnecessary for SSH, the engineer should eliminate configuration for password encryption and DNS name servers, as these are not direct requirements for SSH functionality.

Ano ip domain name ccna.cisco.com

The ip domain name command is crucial for generating RSA keys, which are fundamental to the operation of SSH for secure key exchange.

Bno login local

The login local command is necessary for SSH to authenticate users against local usernames and passwords configured on the device.

Cno service password-encryptionCorrect

The service password-encryption command encrypts clear-text passwords in the device's configuration, but it does not affect the secure communication established by the SSH protocol itself. Removing this command does not prevent SSH from functioning securely as a remote access method.

Dno ip name-server 198.51.100.210Correct

The ip name-server command configures a DNS server for hostname resolution, which is not a direct requirement for the Secure Shell (SSH) protocol to establish a connection. SSH can operate perfectly fine by connecting to IP addresses, and DNS resolution is an auxiliary service.

Eno hostname CPE

The hostname command is required for generating RSA keys, which are an essential component for SSH to establish secure connections.

Concept tested: SSH configuration components

Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/secure-shell-ssh/107559-ssh-secure-config.html

Topics

#SSH configuration#service password-encryption#IOS CLI#DNS removal

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice