Examkin

Soru

Zorluk: OrtaSSH Secure Remote Access Configuration and Verification

A network engineer is inspecting the CLI configuration of a Layer 3 switch named Site-Core-01 to ensure secure administrative access. The switch currently has a valid hostname, a configured IP domain name, and active local user accounts. The line vty configuration displays the following output:

text
Site-Core-01# show running-config | section line vty
line vty 0 15
transport input telnet
login local

Which command executed within line configuration mode will restrict remote management sessions exclusively to SSH while enforcing authentication against the local user database?

  1. transport input sshCevap
  2. B
    transport input all
  3. C
    ip ssh version 2
  4. D
    login authentication default

Cevap

Executing 'transport input ssh' under VTY line configuration mode restricts inbound remote access strictly to SSH sessions.
Executing the command 'transport input ssh' under the VTY line configuration mode restricts inbound remote access to encrypted SSH sessions only. Because 'login local' is already present, the device will authenticate connecting users against its local user database over SSH.

Adım Adım Çözüm

1
Identify the current transport input configuration on the VTY lines
The current setting 'transport input telnet' permits only unencrypted Telnet connections.
By default or explicit command, VTY lines may allow Telnet, which transmits data in cleartext.
2
Determine the line mode command required to enforce SSH remote access exclusively
Applying 'transport input ssh' under 'line vty 0 15' replaces 'telnet' with 'ssh'.
The 'transport input' command controls which protocols are permitted to connect to the switch's virtual terminal lines.

Anahtar Kavram

VTY Line Transport Input Binding and Hardening
Bu soruyu puanla

Konular

SSH Secure Remote Access Configuration and Verification

Bu konudan daha fazla soru