nerdexam
Cisco

200-301 · Question #575

Refer to the exhibit. Which two commands must be added to update the configuration of router R1 so that it accepts only encrypted connections? (Choose two)

The correct answer is D. crypto key generate rsa 1024 E. transport input ssh. To configure a router to accept only encrypted connections via SSH, RSA cryptographic keys must be generated, and the VTY lines must be specifically configured to use SSH for transport.

Submitted by takeshi77· Mar 5, 2026Security Fundamentals

Question

Refer to the exhibit. Which two commands must be added to update the configuration of router R1 so that it accepts only encrypted connections? (Choose two)

Exhibits

200-301 question #575 exhibit 1
200-301 question #575 exhibit 2

Options

  • Ausername CNAC secret R!41!4319115@
  • Bip ssh version 2
  • Cline vty 0 4
  • Dcrypto key generate rsa 1024
  • Etransport input ssh

How the community answered

(14 responses)
  • B
    7% (1)
  • C
    14% (2)
  • D
    79% (11)

Why each option

To configure a router to accept only encrypted connections via SSH, RSA cryptographic keys must be generated, and the VTY lines must be specifically configured to use SSH for transport.

Ausername CNAC secret R!41!4319115@

Creating a local username is for authentication, not directly for enabling or enforcing the encryption of remote connections.

Bip ssh version 2

`ip ssh version 2` specifies which version of SSH to use but does not enable SSH or enforce encrypted connections itself.

Cline vty 0 4

`line vty 0 4` is a command to enter the virtual terminal line configuration mode, not a command that enables or enforces encrypted connections.

Dcrypto key generate rsa 1024Correct

The `crypto key generate rsa 1024` command creates the RSA key pair necessary for encrypting SSH communication, which is fundamental for secure connections.

Etransport input sshCorrect

The `transport input ssh` command, applied to the VTY lines, ensures that only SSH connections are accepted, thereby enforcing encrypted remote access and disallowing unencrypted protocols like Telnet.

Concept tested: SSH configuration (RSA keys, VTY transport)

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ssh/configuration/15-mt/sec-sec-ssh-15-mt-book/sec-cfg-ssh-on-router.html

Topics

#Cisco SSH configuration#VTY line configuration#RSA key generation#Secure remote access

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice