200-301 · Question #368
Refer to the exhibit. A network administrator has been tasked with securing VTY access to a router Which access-list entry accomplishes this task?
The correct answer is A. access-list 101 permit tcp 10.1.10 0.0.0.255 172.16.10 0.0.0.255 eq ssh. To secure VTY access to a router, an access-list entry should be configured to permit only secure protocols like SSH, which uses TCP port 22.
Question
Refer to the exhibit. A network administrator has been tasked with securing VTY access to a router Which access-list entry accomplishes this task?
Exhibits
Options
- Aaccess-list 101 permit tcp 10.1.10 0.0.0.255 172.16.10 0.0.0.255 eq ssh
- Baccess-list 101 permit tcp 10.11.0 0.0.0.255 172.16.10 0.0.0.255 eq scp
- Caccess-list 101 permit tcp 10.11.0 0.0.0.255 172.16.10 0.0.0.255 eq telnet
- Daccess-list 101 permit tcp 10.1.10 0.0.0.255 172.16.10 0.0.0.255 eq https
How the community answered
(32 responses)- A78% (25)
- B3% (1)
- C6% (2)
- D13% (4)
Why each option
To secure VTY access to a router, an access-list entry should be configured to permit only secure protocols like SSH, which uses TCP port 22.
Securing VTY (Virtual Teletype) access means using an encrypted protocol like SSH (Secure Shell), which operates on TCP port 22, to prevent sensitive administrative credentials and data from being transmitted in plain text.
SCP (Secure Copy Protocol) is used for secure file transfer, not for interactive remote terminal access like VTY.
Concept tested: Securing VTY access with SSH and ACLs
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/dcl/sec-ssh-dcl-book/sec-ssh-enable.html
Topics
Community Discussion
No community discussion yet for this question.