Examkin

Question

Difficulty: MediumSSH Secure Remote Access Configuration and Verification

A network engineer is inspecting the CLI configuration of a Layer 3 switch named Site-Core-01 to ensure secure administrative access. The switch currently has a valid hostname, a configured IP domain name, and active local user accounts. The line vty configuration displays the following output:

text
Site-Core-01# show running-config | section line vty
line vty 0 15
transport input telnet
login local

Which command executed within line configuration mode will restrict remote management sessions exclusively to SSH while enforcing authentication against the local user database?

  1. transport input sshAnswer
  2. B
    transport input all
  3. C
    ip ssh version 2
  4. D
    login authentication default

Answer

Executing 'transport input ssh' under VTY line configuration mode restricts inbound remote access strictly to SSH sessions.
Executing the command 'transport input ssh' under the VTY line configuration mode restricts inbound remote access to encrypted SSH sessions only. Because 'login local' is already present, the device will authenticate connecting users against its local user database over SSH.

Step-by-Step Solution

1
Identify the current transport input configuration on the VTY lines
The current setting 'transport input telnet' permits only unencrypted Telnet connections.
By default or explicit command, VTY lines may allow Telnet, which transmits data in cleartext.
2
Determine the line mode command required to enforce SSH remote access exclusively
Applying 'transport input ssh' under 'line vty 0 15' replaces 'telnet' with 'ssh'.
The 'transport input' command controls which protocols are permitted to connect to the switch's virtual terminal lines.

Key Concept

VTY Line Transport Input Binding and Hardening
Rate this question

Topics

SSH Secure Remote Access Configuration and Verification

More questions from this topic