nerdexam
CompTIA

220-1002 · Question #733

A technician is updating a network switch at a location facility. The technician needs to ensure the data is not sent in plaintext over untrusted networks. Which of the following should the…

The correct answer is A. SSH B. SCP. SSH and SCP are both encrypted protocols that protect management sessions and file transfers in transit, making them appropriate for administering a network switch over untrusted networks.

Networking

Question

A technician is updating a network switch at a location facility. The technician needs to ensure the data is not sent in plaintext over untrusted networks. Which of the following should the technician use? (Choose two.)

Options

  • ASSH
  • BSCP
  • CTFTP
  • DFTP
  • ERDP
  • FVNC

How the community answered

(41 responses)
  • A
    88% (36)
  • C
    2% (1)
  • E
    2% (1)
  • F
    7% (3)

Why each option

SSH and SCP are both encrypted protocols that protect management sessions and file transfers in transit, making them appropriate for administering a network switch over untrusted networks.

ASSHCorrect

SSH (Secure Shell) provides an encrypted command-line management session for network devices such as switches, replacing insecure Telnet by encrypting all commands, credentials, and responses so they cannot be intercepted on untrusted networks.

BSCPCorrect

SCP (Secure Copy Protocol) operates over an SSH tunnel to provide encrypted file transfer, allowing the technician to securely push firmware images or configuration files to the switch without exposing their contents in transit.

CTFTP

TFTP (Trivial File Transfer Protocol) transmits files in plaintext with no authentication mechanism, making it entirely unsuitable for use over untrusted networks.

DFTP

FTP (File Transfer Protocol) sends both credentials and file data in plaintext, posing a significant interception risk on untrusted networks.

ERDP

RDP (Remote Desktop Protocol) is used to remotely control Windows graphical desktops and is not applicable for managing the CLI of a network switch.

FVNC

VNC (Virtual Network Computing) provides graphical remote desktop access to workstations and servers, not network switch management interfaces.

Concept tested: Encrypted protocols for secure network device management

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/17-6/configuration_guide/sec/b_176_sec_9300_cg/configuring_secure_shell.html

Topics

#SSH#SCP#encrypted protocols#plaintext prevention

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice