220-1002 · Question #733
A technician is updating a network switch at a location facility. The technician needs to ensure the data is not sent in plaintext over untrusted networks. Which of the following should the…
The correct answer is A. SSH B. SCP. SSH and SCP are both encrypted protocols that protect management sessions and file transfers in transit, making them appropriate for administering a network switch over untrusted networks.
Question
A technician is updating a network switch at a location facility. The technician needs to ensure the data is not sent in plaintext over untrusted networks. Which of the following should the technician use? (Choose two.)
Options
- ASSH
- BSCP
- CTFTP
- DFTP
- ERDP
- FVNC
How the community answered
(41 responses)- A88% (36)
- C2% (1)
- E2% (1)
- F7% (3)
Why each option
SSH and SCP are both encrypted protocols that protect management sessions and file transfers in transit, making them appropriate for administering a network switch over untrusted networks.
SSH (Secure Shell) provides an encrypted command-line management session for network devices such as switches, replacing insecure Telnet by encrypting all commands, credentials, and responses so they cannot be intercepted on untrusted networks.
SCP (Secure Copy Protocol) operates over an SSH tunnel to provide encrypted file transfer, allowing the technician to securely push firmware images or configuration files to the switch without exposing their contents in transit.
TFTP (Trivial File Transfer Protocol) transmits files in plaintext with no authentication mechanism, making it entirely unsuitable for use over untrusted networks.
FTP (File Transfer Protocol) sends both credentials and file data in plaintext, posing a significant interception risk on untrusted networks.
RDP (Remote Desktop Protocol) is used to remotely control Windows graphical desktops and is not applicable for managing the CLI of a network switch.
VNC (Virtual Network Computing) provides graphical remote desktop access to workstations and servers, not network switch management interfaces.
Concept tested: Encrypted protocols for secure network device management
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/17-6/configuration_guide/sec/b_176_sec_9300_cg/configuring_secure_shell.html
Topics
Community Discussion
No community discussion yet for this question.