4.8 Configure Network Devices for Remote Access Using SSH 200-301 Practice Questions (Page 4)

Questions 16–20

1. 16application · easy

   A network engineer is configuring a Cisco router for SSH access. The engineer has set the hostname to 'R1' and the domain name to 'example.com'. Which command generates the RSA key pair required for SSH?

   • Aip ssh rsa keypair-name
   • Bssh key generate
   • Ccrypto key generate rsa
   • Dcrypto key zeroize rsa
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An administrator wants to configure SSH on a router using AAA for authentication. The AAA server is already configured and reachable. Which additional configuration is required on the router to enable SSH with AAA authentication?

   • Ausername admin secret cisco, line vty 0 4, login local, transport input ssh
   • Bip ssh version 2, line vty 0 4, transport input ssh
   • Caaa new-model, aaa authentication login default group tacacs+ local, line vty 0 4, login authentication default, transport input ssh
   • Dcrypto key generate rsa, ip ssh authentication-retries 3
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A network administrator is configuring SSH on a Cisco switch. The switch has a hostname 'SW1' and domain name 'company.com'. The administrator generates an RSA key pair with 1024-bit modulus. Later, a security policy requires a minimum of 2048-bit keys. What must the administrator do to meet the new requirement?

   • ADelete the existing RSA key pair and regenerate with a 2048-bit modulus.
   • BConfigure ip ssh rsa keypair-name to use a different key.
   • CChange the SSH version to 2 to allow larger keys.
   • DUse the crypto key generate rsa modulus 2048 command without deleting the old key.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which command displays the SSH server configuration and status on a Cisco IOS device?

   • Ashow ssh
   • Bshow crypto key
   • Cshow running-config | include ssh
   • Dshow ip ssh
   Reveal Solution Discussion Select an answer first
6. 20application · easy

   A company has a policy that all remote device management must be encrypted. Currently, network devices are managed via Telnet. The administrator needs to migrate to SSH. What is the primary reason SSH is preferred over Telnet for this migration?

   • ASSH encrypts all data, including passwords, while Telnet sends data in plaintext.
   • BSSH supports multiple simultaneous sessions, while Telnet only supports one.
   • CSSH uses TCP port 22, which is faster than Telnet's port 23.
   • DSSH is easier to configure than Telnet.
   Reveal Solution Discussion Select an answer first