CCNA: Cisco Certified Network Associate — Question 567

An engineer is configuring SSH version 2 exclusively on the R1 router. What is the minimum configuration required to permit remote management using the cryptographic protocol?

Answer options

• A. hostname R1 service password-encryption crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input ssh login local
• B. hostname R1 ip domain name cisco crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input ssh login local
• C. hostname R1 crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input ssh login local
• D. hostname R1 ip domain name cisco crypto key generate rsa general-keys modulus 1024 username cisco privilege 15 password 0 cisco123 ip ssh version 2 line vty 0 15 transport input all login local

Correct answer: B

Explanation

The correct answer, B, includes the necessary configuration of the hostname and domain name, which are required for SSH to function properly. Option A is incorrect because it includes 'service password-encryption' which is not required for SSH configuration. Option C lacks the 'ip domain name cisco', essential for key generation. Option D incorrectly specifies 'transport input all', which does not limit access to SSH only.