300-410 · Question #57
Refer to the exhibit. An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and find the displayed output when troubleshooting. Which…
The correct answer is A. crypto key generate rsa. To enable SSH on a Cisco device, an RSA cryptographic key pair must first be generated. SSH relies on these keys for secure encryption and authentication, and without them, the SSH server cannot operate.
Question
Options
- Acrypto key generate rsa
- Bip ssh enable
- Cno ip ssh disable
- Dip ssh version 2
How the community answered
(17 responses)- A88% (15)
- B6% (1)
- D6% (1)
Why each option
To enable SSH on a Cisco device, an RSA cryptographic key pair must first be generated. SSH relies on these keys for secure encryption and authentication, and without them, the SSH server cannot operate.
The `crypto key generate rsa` command creates the RSA cryptographic key pair necessary for encrypting SSH sessions and authenticating the device. This key generation is a fundamental prerequisite for the SSH server to become active and accept connections.
There is no `ip ssh enable` command in Cisco IOS; SSH functionality is implicitly enabled once an RSA key is generated and VTY lines are configured for SSH access.
The command `no ip ssh disable` is syntactically incorrect; SSH is not managed by a simple enable/disable command in this manner.
`ip ssh version 2` configures the device to use SSH protocol version 2, but it does not generate the necessary cryptographic keys to enable SSH functionality in the first place.
Concept tested: SSH Configuration Prerequisites
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/d1/sec-secure-shell/configuration/15-mt/sec-ssh-15-mt-book/sec-config-ssh.html
Topics
Community Discussion
No community discussion yet for this question.