4.8 Configure Network Devices for Remote Access Using SSH 200-301 Practice Questions (Page 5)

Questions 21–24

1. 21expert · hard

   A network engineer is configuring SSH on a Cisco router that uses AAA for authentication. The engineer wants SSH users to be authenticated via AAA. Which configuration is required on the VTY lines?

   • Alogin authentication default
   • Baaa new-model
   • Clogin local
   • Dtransport input ssh
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which statement correctly describes a key difference between SSH and Telnet?

   • ASSH is used for file transfer, while Telnet is used for remote command execution
   • BSSH requires a username and password, while Telnet does not require authentication
   • CSSH encrypts all session data, while Telnet transmits data in plaintext
   • DSSH uses TCP port 23, while Telnet uses TCP port 22
   Reveal Solution Discussion Select an answer first
4. 23application · easy

   A company is replacing Telnet with SSH for network device management to improve security. Which security feature does SSH provide that Telnet does not?

   • AEncryption of all data transmitted between client and server
   • BAuthentication using only usernames and passwords
   • CAbility to transfer files securely
   • DSupport for IPv6 addressing
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which configuration is required to use local authentication for SSH access on a Cisco IOS device?

   • AGenerate an RSA key and configure 'ip ssh authentication'
   • BSet the enable password and use 'login' on the VTY lines
   • CCreate local usernames and configure 'login local' on the VTY lines
   • DConfigure a RADIUS server and enable 'aaa new-model'
   Reveal Solution Discussion Select an answer first