200-301 · Question #632
A network engineer is replacing the switches that belong to a managed-services client with new Cisco Catalyst switches. The new switches will be configured for updated security standards including rep
The correct answer is D. crypto key generate rsa modulus 2048 E. transport input ssh. To replace Telnet with encrypted connections and increase the RSA key modulus size on Cisco Catalyst switches, the engineer must configure SSH for secure access and generate an RSA key pair with a 2048-bit modulus.
Question
A network engineer is replacing the switches that belong to a managed-services client with new Cisco Catalyst switches. The new switches will be configured for updated security standards including replacing. Telnet services with encrypted connections and doubling the modulus size from 1024. Which two commands must the engineer configure on the new switches? (Choose two.)
Options
- Acrypto key generate rsa general-keys modulus 1024
- Btransport input all
- Ccrypto key generate rsa usage-keys
- Dcrypto key generate rsa modulus 2048
- Etransport input ssh
How the community answered
(23 responses)- A4% (1)
- B4% (1)
- C13% (3)
- D78% (18)
Why each option
To replace Telnet with encrypted connections and increase the RSA key modulus size on Cisco Catalyst switches, the engineer must configure SSH for secure access and generate an RSA key pair with a 2048-bit modulus.
This command generates an RSA key with a 1024-bit modulus, which is half the required size and does not meet the 'doubling the modulus size' requirement.
The `transport input all` command allows all connection protocols, including Telnet, which contradicts the requirement to replace Telnet with encrypted connections.
The `crypto key generate rsa usage-keys` command generates separate key pairs for signature and encryption, but it does not specify the modulus size as required by the question.
The `crypto key generate rsa modulus 2048` command creates an RSA key pair with a 2048-bit modulus, fulfilling the requirement to 'double the modulus size from 1024' for stronger encryption, essential for secure services like SSH.
The `transport input ssh` command, configured on a VTY line, restricts incoming virtual terminal connections to only use SSH, disabling insecure protocols like Telnet, directly addressing the requirement for encrypted connections.
Concept tested: SSH configuration and RSA key generation
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_55_se/configuration/guide/scg/sw_ssh.html
Topics
Community Discussion
No community discussion yet for this question.