200-301: Cisco Certified Network AssociateDemo

Question

An engineer is configuring SSH version 2 exclusively on the R1 router. What is the minimum configuration required to allow remote management by using this cryptographic protocol?

A hostname R1 service password-encryption crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input ssh login local
B hostname R1 ip domain name cisco crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input ssh login local
C hostname R1 crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input ssh login local
D hostname R1 ip domain name cisco crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input all login local

Explanation

SSHv2 key generation requires both a hostname and IP domain name to be configured beforehand. Option B includes both prerequisites plus the local user authentication, SSH version specification, and VTY transport restriction to SSH only. Option A adds unnecessary password encryption; Option C omits the required domain name; Option D uses transport input all which does not enforce SSH exclusivity.

Learn more

Cisco Secure Shell Configuration Guide: SSH Version 2

200-301: Cisco Certified Network AssociateDemo

AstroTutor

Notes

Readiness

QuestionQ666

Community Discussion