220-801 · Question #287
Which of the following protocols would be BEST used to access the command line interface of a router securely?
The correct answer is C. SSH. SSH (Secure Shell) is the correct protocol for securely accessing a router's command line interface because it encrypts all session traffic including credentials.
Question
Options
- ATELNET
- BHTTP
- CSSH
- DSFTP
How the community answered
(23 responses)- A4% (1)
- B4% (1)
- C91% (21)
Why each option
SSH (Secure Shell) is the correct protocol for securely accessing a router's command line interface because it encrypts all session traffic including credentials.
Telnet transmits all data including passwords in plaintext over TCP port 23, making it completely insecure for remote device management.
HTTP is a web application protocol used to serve web pages and does not provide a command line interface or encrypt session data.
SSH establishes an encrypted tunnel between the client and the network device, protecting all transmitted data - including usernames, passwords, and commands - from interception. It operates on TCP port 22 and supports strong authentication methods including public-key cryptography. SSH replaced Telnet specifically because Telnet transmits everything in plaintext, making SSH the universally accepted standard for secure remote CLI management of network devices.
SFTP (SSH File Transfer Protocol) is used for secure file transfers over an SSH connection and does not provide interactive CLI access to a device.
Concept tested: SSH for secure remote CLI access to network devices
Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/secure-shell-ssh/4145-ssh.html
Topics
Community Discussion
No community discussion yet for this question.