200-301 · Question #575
Refer to the exhibit. Which two commands must be added to update the configuration of router R1 so that it accepts only encrypted connections? (Choose two)
The correct answer is D. crypto key generate rsa 1024 E. transport input ssh. To configure a router to accept only encrypted connections via SSH, RSA cryptographic keys must be generated, and the VTY lines must be specifically configured to use SSH for transport.
Question
Refer to the exhibit. Which two commands must be added to update the configuration of router R1 so that it accepts only encrypted connections? (Choose two)
Exhibits
Options
- Ausername CNAC secret R!41!4319115@
- Bip ssh version 2
- Cline vty 0 4
- Dcrypto key generate rsa 1024
- Etransport input ssh
How the community answered
(14 responses)- B7% (1)
- C14% (2)
- D79% (11)
Why each option
To configure a router to accept only encrypted connections via SSH, RSA cryptographic keys must be generated, and the VTY lines must be specifically configured to use SSH for transport.
Creating a local username is for authentication, not directly for enabling or enforcing the encryption of remote connections.
`ip ssh version 2` specifies which version of SSH to use but does not enable SSH or enforce encrypted connections itself.
`line vty 0 4` is a command to enter the virtual terminal line configuration mode, not a command that enables or enforces encrypted connections.
The `crypto key generate rsa 1024` command creates the RSA key pair necessary for encrypting SSH communication, which is fundamental for secure connections.
The `transport input ssh` command, applied to the VTY lines, ensures that only SSH connections are accepted, thereby enforcing encrypted remote access and disallowing unencrypted protocols like Telnet.
Concept tested: SSH configuration (RSA keys, VTY transport)
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ssh/configuration/15-mt/sec-sec-ssh-15-mt-book/sec-cfg-ssh-on-router.html
Topics
Community Discussion
No community discussion yet for this question.

