Refer to the exhibit. Which two commands must be configured on router R1 to enable the router to accept secure remote-access connections? (Choose two)

`transport input telnet` enables insecure Telnet access, which is not considered a secure remote-access connection.

The `crypto key generate rsa` command creates the necessary asymmetric key pair that Secure Shell (SSH) uses for encrypting remote management traffic.

`ip ssh pubkey-chain` is used for public key authentication but does not generate the RSA key itself or establish a basic local username for password authentication.

`login console` applies only to the physical console port, not to virtual terminal (VTY) lines used for remote access.

The `username cisco password 0 Cisco` command creates a local user account with a password, which is essential for authenticating users attempting to establish secure remote connections via SSH.