200-301 · Question #574
A network engineer is configuring a switch so that it is remotely reachable via SSH. The engineer has already configured the host name on the router. Which additional command must the engineer configu
The correct answer is C. ip domain-name domain. Before generating an RSA key pair for SSH on a Cisco device, both a hostname and an IP domain name must be configured as prerequisites.
Question
A network engineer is configuring a switch so that it is remotely reachable via SSH. The engineer has already configured the host name on the router. Which additional command must the engineer configure before entering the command to generate the RSA key?
Options
- Apassword password
- Bcrypto key generate rsa modulus 1024
- Cip domain-name domain
- Dip ssh authentication-retries 2
How the community answered
(26 responses)- A4% (1)
- C96% (25)
Why each option
Before generating an RSA key pair for SSH on a Cisco device, both a hostname and an IP domain name must be configured as prerequisites.
Setting a general password is for authentication, not a prerequisite for the technical generation of RSA keys.
`crypto key generate rsa modulus 1024` is the command to generate the RSA key, but the question asks for a command that must be configured *before* entering this one.
Configuring the `ip domain-name domain` command is a mandatory prerequisite for generating RSA cryptographic keys on Cisco devices, which are essential for enabling SSH functionality.
Configuring `ip ssh authentication-retries` is an SSH behavior setting that is configured after RSA keys are generated, not a prerequisite for their generation.
Concept tested: SSH prerequisites (domain-name)
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ssh/configuration/15-mt/sec-sec-ssh-15-mt-book/sec-cfg-ssh-on-router.html
Topics
Community Discussion
No community discussion yet for this question.