Quiz

Question 1

You issue the crypto key generate rsa command on a Cisco router, but the command is rejected. Which of the following might be the cause? (select two)

  1. A host name hasn't been configured.

  2. The ip ssh version 2 command hasn't been configured.

  3. The transport input ssh command hasn't been configured.

  4. Only switches can generate RSA keys.

  5. A DNS domain name hasn't been configured

  6. SSH version 1.99 is enabled.

Solution
  1. A host name hasn't been configured.

  1. A DNS domain name hasn't been configured.

Question 2

Which of the following commands would allow both Telnet and SSH to be used to connect to the VTY lines of a device? (select two, each answer is a complete solution)

  1. transport input default

  2. transport input none

  3. transport input telnet ssh

  4. transport input all

Solution
  1. transport input telnet ssh

  2. transport input all

Question 3

You want to allow only 192.168.1.1 to connect to R1 via SSH? Which of the following configurations fulfills that requirement?

Solution

b

Question 4

Which of the following statements about SSH are true? (select two)

  1. RSA keys are optional but recommended.

  2. K9 IOS images support SSH.

  3. SSH version 1.99 was released between version 1 and version 2.

  4. SSH sends data in plain text.

  5. NPE IOS images support SSH.

  6. A key length of at least 768 bits is required for SSHv2.

Solution
  1. K9 IOS images support SSH.

  1. A key length of at least 768 bits is required for SSHv2.

Question 5

A networkk admin using PC1 is remotely configuring SW1 by connecting to the CLI of SW1 via SSH. What is the role of SW1 in this situation?

  1. SSH peer.

  2. SSH server.

  3. SSH client.

  4. None of the above

Solution
  1. SSH server.

Last updated