300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and ServicesDemo

By Cisco · Question Mode

QuestionQ615

Infrastructure Security

Question Image

Refer to the exhibit. Which two actions limit access to router R1 to SSH?

Choose two
  • A Remove class-map ANY from service-policy CoPP.
  • B Configure transport output ssh on line vty and remove sequence 20 from access list 100.
  • C Configure transport input ssh on line vty and remove sequence 30 from access list 100.
  • D Remove sequence 10 from access list 100 and add sequence 20 deny tcp any any eq telnet to access list 199.
  • E Configure transport output ssh on line vty and remove sequence 10 from access list 199.
Explanation

transport input ssh permits only incoming SSH sessions on the VTY lines, while transport output ssh restricts VTY-originated remote connections to SSH. Removing ACL 100 sequence 20 eliminates the explicit permit for TCP traffic destined for Telnet, and removing sequence 30 eliminates the Telnet-sourced TCP entry. Cisco documents that transport input defines the protocols that can access a router and that transport output controls outgoing connections from a line.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!