200-301: Cisco Certified Network AssociateDemo

By Cisco · Question Mode

QuestionQ954

Security Fundamentals

A network administrator must configure SSH for remote access to router R1.

The requirement is to use a public and private key pair to encrypt management traffic to and from the connecting client.

Which configuration, when applied, meets these requirements?

  • A R1#enable R1#configure terminal R1(config)#ip domain-name cisco.com R1(config)#crypto key generate ec keysize 1024
  • B R1#enable R1#configure terminal R1(config)#ip domain-name cisco.com R1(config)#crypto key generate ec keysize 2048
  • C R1#enable R1#configure terminal R1(config)#ip domain-name cisco.com R1(config)#crypto key encrypt rsa name myKey
  • D R1#enable R1#configure terminal R1(config)#ip domain-name cisco.com R1(config)#crypto key generate rsa modulus 1024
Explanation

Cisco IOS/IOS XE SSH is enabled by generating an RSA key pair with crypto key generate rsa after defining the device domain name. That command creates the public/private host keys SSH uses for encrypted management access and remote authentication. The EC commands shown are not the documented SSH setup command here, and crypto key encrypt rsa does not generate the required SSH host key pair. Therefore the RSA generation command with a modulus value is the valid configuration.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!