200-301 · Question #922
Refer to the exhibit. An engineer is updating the management access configuration of switch SW1 to allow secured, encrypted remote configuration. Which two commands or command sequences must the engin
The correct answer is B. SW1(config)#username NEW secret R3mote123 C. SW1(config)#line vty 0 15. Secured, encrypted remote configuration (SSH) on a Cisco switch requires creating local user accounts for authentication and configuring the VTY lines to accept SSH connections using these credentials.
Question
Refer to the exhibit. An engineer is updating the management access configuration of switch SW1 to allow secured, encrypted remote configuration. Which two commands or command sequences must the engineer apply to the switch? (Choose two.)
Exhibits
Options
- ASW1(config)#enable secret ccnaTest123
- BSW1(config)#username NEW secret R3mote123
- CSW1(config)#line vty 0 15
- DSW1(config)# crypto key generate rsa
- ESW1(config)# interface f0/1
How the community answered
(41 responses)- A7% (3)
- B76% (31)
- D2% (1)
- E15% (6)
Why each option
Secured, encrypted remote configuration (SSH) on a Cisco switch requires creating local user accounts for authentication and configuring the VTY lines to accept SSH connections using these credentials.
`enable secret ccnaTest123` secures privileged EXEC mode access but does not directly enable or encrypt the remote connection itself (SSH).
`username NEW secret R3mote123` creates a local user account and password, which is essential for local authentication when users connect to the switch via SSH.
`line vty 0 15` enters the virtual terminal line configuration mode where commands like `login local` and `transport input ssh` would be applied to enable SSH access and use the locally defined user accounts for authentication.
`crypto key generate rsa` is a critical prerequisite for SSH to function by generating cryptographic keys for encryption, but the question asks for two commands to *apply* for management access configuration, and B and C are direct configurations for user authentication and VTY line access method.
`interface f0/1` is used to configure a specific physical network interface, which is unrelated to configuring management access via SSH to the switch itself.
Concept tested: SSH configuration (user authentication, VTY lines)
Source: https://www.cisco.com/c/en/us/td/docs/ios/sec_user_services/configuration/guide/15_mt/sec_usr_serv_15_mt_book/sec_cfg_ssh.html
Topics
Community Discussion
No community discussion yet for this question.