CCNA: Cisco Certified Network Associate — Question 447

A network engineer is replacing the switches that belong to a managed-services client with new Cisco Catalyst switches. The new switches will be configured for updated security standards including replacing.
Telnet services with encrypted connections and doubling the modulus size from 1024. Which two commands must the engineer configure on the new switches?
(Choose two.)

Answer options

• A. transport input ssh
• B. transport input all
• C. crypto key generate rsa modulus 2048
• D. crypto key generate rsa general-keys modulus 1024
• E. crypto key generate rsa usage-keys

Correct answer: A, C

Explanation

The command 'transport input ssh' enables SSH for secure remote access, which is necessary to replace Telnet. The command 'crypto key generate rsa modulus 2048' is needed to increase the key size for better security. The other options either do not relate to SSH or do not meet the requirement for a modulus size of 2048.