200-301 · Question #1574
Refer to the exhibit. An engineer executed the script and added commands that were not necessary for SSH and must now remove the commands. Which two commands must be executed to correct the configurat
The correct answer is C. no service password-encryption D. no ip name-server 198.51.100.210. To remove commands unnecessary for SSH, the engineer should eliminate configuration for password encryption and DNS name servers, as these are not direct requirements for SSH functionality.
Question
Refer to the exhibit. An engineer executed the script and added commands that were not necessary for SSH and must now remove the commands. Which two commands must be executed to correct the configuration? (Choose two.)
Exhibits
Options
- Ano ip domain name ccna.cisco.com
- Bno login local
- Cno service password-encryption
- Dno ip name-server 198.51.100.210
- Eno hostname CPE
How the community answered
(65 responses)- A3% (2)
- B14% (9)
- C77% (50)
- E6% (4)
Why each option
To remove commands unnecessary for SSH, the engineer should eliminate configuration for password encryption and DNS name servers, as these are not direct requirements for SSH functionality.
The ip domain name command is crucial for generating RSA keys, which are fundamental to the operation of SSH for secure key exchange.
The login local command is necessary for SSH to authenticate users against local usernames and passwords configured on the device.
The service password-encryption command encrypts clear-text passwords in the device's configuration, but it does not affect the secure communication established by the SSH protocol itself. Removing this command does not prevent SSH from functioning securely as a remote access method.
The ip name-server command configures a DNS server for hostname resolution, which is not a direct requirement for the Secure Shell (SSH) protocol to establish a connection. SSH can operate perfectly fine by connecting to IP addresses, and DNS resolution is an auxiliary service.
The hostname command is required for generating RSA keys, which are an essential component for SSH to establish secure connections.
Concept tested: SSH configuration components
Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/secure-shell-ssh/107559-ssh-secure-config.html
Topics
Community Discussion
No community discussion yet for this question.

