nerdexam
Cisco

200-301 · Question #632

A network engineer is replacing the switches that belong to a managed-services client with new Cisco Catalyst switches. The new switches will be configured for updated security standards including rep

The correct answer is D. crypto key generate rsa modulus 2048 E. transport input ssh. To replace Telnet with encrypted connections and increase the RSA key modulus size on Cisco Catalyst switches, the engineer must configure SSH for secure access and generate an RSA key pair with a 2048-bit modulus.

Submitted by noor.lb· Mar 5, 2026Security Fundamentals

Question

A network engineer is replacing the switches that belong to a managed-services client with new Cisco Catalyst switches. The new switches will be configured for updated security standards including replacing. Telnet services with encrypted connections and doubling the modulus size from 1024. Which two commands must the engineer configure on the new switches? (Choose two.)

Options

  • Acrypto key generate rsa general-keys modulus 1024
  • Btransport input all
  • Ccrypto key generate rsa usage-keys
  • Dcrypto key generate rsa modulus 2048
  • Etransport input ssh

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    13% (3)
  • D
    78% (18)

Why each option

To replace Telnet with encrypted connections and increase the RSA key modulus size on Cisco Catalyst switches, the engineer must configure SSH for secure access and generate an RSA key pair with a 2048-bit modulus.

Acrypto key generate rsa general-keys modulus 1024

This command generates an RSA key with a 1024-bit modulus, which is half the required size and does not meet the 'doubling the modulus size' requirement.

Btransport input all

The `transport input all` command allows all connection protocols, including Telnet, which contradicts the requirement to replace Telnet with encrypted connections.

Ccrypto key generate rsa usage-keys

The `crypto key generate rsa usage-keys` command generates separate key pairs for signature and encryption, but it does not specify the modulus size as required by the question.

Dcrypto key generate rsa modulus 2048Correct

The `crypto key generate rsa modulus 2048` command creates an RSA key pair with a 2048-bit modulus, fulfilling the requirement to 'double the modulus size from 1024' for stronger encryption, essential for secure services like SSH.

Etransport input sshCorrect

The `transport input ssh` command, configured on a VTY line, restricts incoming virtual terminal connections to only use SSH, disabling insecure protocols like Telnet, directly addressing the requirement for encrypted connections.

Concept tested: SSH configuration and RSA key generation

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_55_se/configuration/guide/scg/sw_ssh.html

Topics

#Cisco SSH configuration#Cisco RSA key generation

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice