Cisco CCNA 200-301 SSH Remote Access Practice Test

Topic 30 focuses on SSH Remote Access for the Cisco Certified Network Associate (CCNA) certification and the 200-301 exam, using Cisco networking and Cisco IOS concepts where relevant. For broader exam preparation, review the Cisco CCNA 200-301 Exam Dumps page. Each question includes a concise explanation of the correct answer and the technical reason the other choices are incorrect.

Question 1

Which encrypted protocol is used for secure remote command-line access to a network device?

1. Hostname
2. RSA key pair
3. SSH
4. login local

Correct Answer: C

 

Correct Answer

Answer C is correct because the selected answer describes an encrypted protocol used for secure remote command-line access to a network device.

Incorrect Answers

Answer A is incorrect because the “Hostname” option describes a different concept: a device name that, together with a domain name, is commonly required before generating IOS RSA keys.

Answer B is incorrect because the “RSA key pair” option describes a different concept: a public/private cryptographic key pair commonly generated on IOS to support SSH server operation.

Answer D is incorrect because the “login local” option describes a different concept: a Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.

 

Question 2

What is a public/private cryptographic key pair commonly generated on IOS to support SSH server operation?

1. login local
2. transport input ssh
3. RSA key pair
4. SSH

Correct Answer: C

 

Correct Answer

Answer C is correct because the selected answer describes a public/private cryptographic key pair commonly generated on IOS to support SSH server operation.

Incorrect Answers

Answer A is incorrect because the “login local” option describes a different concept: a Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.

Answer B is incorrect because the “transport input ssh” option describes a different concept: a Cisco IOS VTY-line command that permits SSH while excluding unwanted inbound terminal protocols such as Telnet.

Answer D is incorrect because the “SSH” option describes a different concept: an encrypted protocol used for secure remote command-line access to a network device.

 

Question 3

What is a device name that, together with a domain name, is commonly required before generating IOS RSA keys?

1. Domain name
2. Hostname
3. transport input ssh
4. SSHv2

Correct Answer: B

 

Correct Answer

Answer B is correct because the selected answer describes a device name that, together with a domain name, is commonly required before generating IOS RSA keys.

Incorrect Answers

Answer A is incorrect because the “Domain name” option describes a different concept: a configured DNS-style domain value commonly used by IOS as part of RSA key generation prerequisites.

Answer C is incorrect because the “transport input ssh” option describes a different concept: a Cisco IOS VTY-line command that permits SSH while excluding unwanted inbound terminal protocols such as Telnet.

Answer D is incorrect because the “SSHv2” option describes a different concept: the modern SSH protocol version preferred over legacy SSH version 1.

 

Question 4

Which configured DNS-style domain value commonly is used by IOS as part of RSA key generation prerequisites?

1. login local
2. VTY lines
3. Domain name
4. transport input ssh

Correct Answer: C

 

Correct Answer

Answer C is correct because the selected answer describes a configured DNS-style domain value commonly used by IOS as part of RSA key generation prerequisites.

Incorrect Answers

Answer A is incorrect because the “login local” option describes a different concept: a Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.

Answer B is incorrect because the “VTY lines” option describes a different concept: Logical IOS terminal lines that receive remote CLI connections.

Answer D is incorrect because the “transport input ssh” option describes a different concept: a Cisco IOS VTY-line command that permits SSH while excluding unwanted inbound terminal protocols such as Telnet.

 

Question 5

Which locally stored account can be used to authenticate an inbound SSH session?

1. RSA key pair
2. SSH
3. login local
4. Local username

Correct Answer: D

 

Correct Answer

Answer D is correct because the selected answer describes a locally stored account that can be used to authenticate an inbound SSH session.

Incorrect Answers

Answer A is incorrect because the “RSA key pair” option describes a different concept: a public/private cryptographic key pair commonly generated on IOS to support SSH server operation.

Answer B is incorrect because the “SSH” option describes a different concept: an encrypted protocol used for secure remote command-line access to a network device.

Answer C is incorrect because the “login local” option describes a different concept: a Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.

 

Question 6

Which Cisco IOS VTY-line command instructs the device to authenticate users against the local username database?

1. login local
2. SSH
3. Hostname
4. RSA key pair

Correct Answer: A

 

Correct Answer

Answer A is correct because the selected answer describes a Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.

Incorrect Answers

Answer B is incorrect because the “SSH” option describes a different concept: an encrypted protocol used for secure remote command-line access to a network device.

Answer C is incorrect because the “Hostname” option describes a different concept: a device name that, together with a domain name, is commonly required before generating IOS RSA keys.

Answer D is incorrect because the “RSA key pair” option describes a different concept: a public/private cryptographic key pair commonly generated on IOS to support SSH server operation.

 

Question 7

Which Cisco IOS VTY-line command permits SSH while excluding unwanted inbound terminal protocols such as Telnet?

1. Local username
2. RSA key pair
3. VTY lines
4. transport input ssh

Correct Answer: D

 

Correct Answer

Answer D is correct because the selected answer describes a Cisco IOS VTY-line command that permits SSH while excluding unwanted inbound terminal protocols such as Telnet.

Incorrect Answers

Answer A is incorrect because the “Local username” option describes a different concept: a locally stored account that can be used to authenticate an inbound SSH session.

Answer B is incorrect because the “RSA key pair” option describes a different concept: a public/private cryptographic key pair commonly generated on IOS to support SSH server operation.

Answer C is incorrect because the “VTY lines” option describes a different concept: Logical IOS terminal lines that receive remote CLI connections.

 

Question 8

Which term describes logical IOS terminal lines that receive remote CLI connections?

1. VTY lines
2. login local
3. SSH
4. Domain name

Correct Answer: A

 

Correct Answer

Answer A is correct because it describes logical IOS terminal lines that receive remote CLI connections.

Incorrect Answers

Answer B is incorrect because the “login local” option describes a different concept: a Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.

Answer C is incorrect because the “SSH” option describes a different concept: an encrypted protocol used for secure remote command-line access to a network device.

Answer D is incorrect because the “Domain name” option describes a different concept: a configured DNS-style domain value commonly used by IOS as part of RSA key generation prerequisites.

 

Question 9

What is the modern SSH protocol version preferred over legacy SSH version 1?

1. transport input ssh
2. SSHv2
3. SSH
4. Hostname

Correct Answer: B

 

Correct Answer

Answer B is correct because the selected answer describes the modern SSH protocol version preferred over legacy SSH version 1.

Incorrect Answers

Answer A is incorrect because the “transport input ssh” option describes a different concept: a Cisco IOS VTY-line command that permits SSH while excluding unwanted inbound terminal protocols such as Telnet.

Answer C is incorrect because the “SSH” option describes a different concept: an encrypted protocol used for secure remote command-line access to a network device.

Answer D is incorrect because the “Hostname” option describes a different concept: a device name that, together with a domain name, is commonly required before generating IOS RSA keys.

 

Question 10

Which protection makes SSH session contents unreadable to a passive network observer without the required keys?

1. Domain name
2. RSA key pair
3. transport input ssh
4. Encryption

Correct Answer: D

 

Correct Answer

Answer D is correct because the selected answer describes the protection that makes SSH session contents unreadable to a passive network observer without the required keys.

Incorrect Answers

Answer A is incorrect because the “Domain name” option describes a different concept: a configured DNS-style domain value commonly used by IOS as part of RSA key generation prerequisites.

Answer B is incorrect because the “RSA key pair” option describes a different concept: a public/private cryptographic key pair commonly generated on IOS to support SSH server operation.

Answer C is incorrect because the “transport input ssh” option describes a different concept: a Cisco IOS VTY-line command that permits SSH while excluding unwanted inbound terminal protocols such as Telnet.

 

Question 11

A packet capture must not expose an administrator’s remote CLI session in readable plaintext. Which description explains why SSH meets this requirement?

1. The protection that makes SSH session contents unreadable to a passive network observer without the required keys.
2. An encrypted protocol used for secure remote command-line access to a network device.
3. A device name that, together with a domain name, is commonly required before generating IOS RSA keys.
4. A Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.

Correct Answer: B

 

Correct Answer

Answer B is correct because the choice accurately describes SSH: An encrypted protocol used for secure remote command-line access to a network device.

Incorrect Answers

Answer A is incorrect because the “Encryption” option describes a different concept: the protection that makes SSH session contents unreadable to a passive network observer without the required keys.

Answer C is incorrect because the “Hostname” option describes a different concept: a device name that, together with a domain name, is commonly required before generating IOS RSA keys.

Answer D is incorrect because the “login local” option describes a different concept: a Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.

 

Question 12

For RSA key pair, which statement is accurate?

1. A public/private cryptographic key pair commonly generated on IOS to support SSH server operation.
2. Logical IOS terminal lines that receive remote CLI connections.
3. A Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.
4. An encrypted protocol used for secure remote command-line access to a network device.

Correct Answer: A

 

Correct Answer

Answer A is correct because the selected answer describes a public/private cryptographic key pair commonly generated on IOS to support SSH server operation.

Incorrect Answers

Answer B is incorrect because the “VTY lines” option describes a different concept: Logical IOS terminal lines that receive remote CLI connections.

Answer C is incorrect because the “login local” option describes a different concept: a Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.

Answer D is incorrect because the “SSH” option describes a different concept: an encrypted protocol used for secure remote command-line access to a network device.

 

Question 13

For Hostname, which statement is accurate?

1. A device name that, together with a domain name, is commonly required before generating IOS RSA keys.
2. The protection that makes SSH session contents unreadable to a passive network observer without the required keys.
3. A configured DNS-style domain value commonly used by IOS as part of RSA key generation prerequisites.
4. A Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.

Correct Answer: A

 

Correct Answer

Answer A is correct because the selected answer describes a device name that, together with a domain name, is commonly required before generating IOS RSA keys.

Incorrect Answers

Answer B is incorrect because the “Encryption” option describes a different concept: the protection that makes SSH session contents unreadable to a passive network observer without the required keys.

Answer C is incorrect because the “Domain name” option describes a different concept: a configured DNS-style domain value commonly used by IOS as part of RSA key generation prerequisites.

Answer D is incorrect because the “login local” option describes a different concept: a Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.

 

Question 14

For Domain name, which statement is accurate?

1. A public/private cryptographic key pair commonly generated on IOS to support SSH server operation.
2. A configured DNS-style domain value commonly used by IOS as part of RSA key generation prerequisites.
3. A Cisco IOS VTY-line command that permits SSH while excluding unwanted inbound terminal protocols such as Telnet.
4. A Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.

Correct Answer: B

 

Correct Answer

Answer B is correct because it accurately defines Domain name. The matching definition is: A configured DNS-style domain value commonly used by IOS as part of RSA key generation prerequisites.

Incorrect Answers

Answer A is incorrect because the “RSA key pair” option describes a different concept: a public/private cryptographic key pair commonly generated on IOS to support SSH server operation.

Answer C is incorrect because the “transport input ssh” option describes a different concept: a Cisco IOS VTY-line command that permits SSH while excluding unwanted inbound terminal protocols such as Telnet.

Answer D is incorrect because the “login local” option describes a different concept: a Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.

 

Question 15

For Local username, which statement is accurate?

1. An encrypted protocol used for secure remote command-line access to a network device.
2. A device name that, together with a domain name, is commonly required before generating IOS RSA keys.
3. A Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.
4. A locally stored account that can be used to authenticate an inbound SSH session.

Correct Answer: D

 

Correct Answer

Answer D is correct because the choice accurately describes Local username: A locally stored account that can be used to authenticate an inbound SSH session.

Incorrect Answers

Answer A is incorrect because the “SSH” option describes a different concept: an encrypted protocol used for secure remote command-line access to a network device.

Answer B is incorrect because the “Hostname” option describes a different concept: a device name that, together with a domain name, is commonly required before generating IOS RSA keys.

Answer C is incorrect because the “login local” option describes a different concept: a Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.

 

Question 16

For login local, which statement is accurate?

1. A Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.
2. A locally stored account that can be used to authenticate an inbound SSH session.
3. A public/private cryptographic key pair commonly generated on IOS to support SSH server operation.
4. Logical IOS terminal lines that receive remote CLI connections.

Correct Answer: A

 

Correct Answer

Answer A is correct because the selected answer describes a Cisco IOS VTY-line command that instructs the device to authenticate users against the local username database.

Incorrect Answers

Answer B is incorrect because the “Local username” option describes a different concept: a locally stored account that can be used to authenticate an inbound SSH session.

Answer C is incorrect because the “RSA key pair” option describes a different concept: a public/private cryptographic key pair commonly generated on IOS to support SSH server operation.

Answer D is incorrect because the “VTY lines” option describes a different concept: Logical IOS terminal lines that receive remote CLI connections.

 

Question 17

For transport input ssh, which statement is accurate?

1. The protection that makes SSH session contents unreadable to a passive network observer without the required keys.
2. A Cisco IOS VTY-line command that permits SSH while excluding unwanted inbound terminal protocols such as Telnet.
3. A configured DNS-style domain value commonly used by IOS as part of RSA key generation prerequisites.
4. Logical IOS terminal lines that receive remote CLI connections.

Correct Answer: B

 

Correct Answer

Answer B is correct because the selected answer describes a Cisco IOS VTY-line command that permits SSH while excluding unwanted inbound terminal protocols such as Telnet.

Incorrect Answers

Answer A is incorrect because the “Encryption” option describes a different concept: the protection that makes SSH session contents unreadable to a passive network observer without the required keys.

Answer C is incorrect because the “Domain name” option describes a different concept: a configured DNS-style domain value commonly used by IOS as part of RSA key generation prerequisites.

Answer D is incorrect because the “VTY lines” option describes a different concept: Logical IOS terminal lines that receive remote CLI connections.

 

Question 18

An IOS administrator applies remote-access controls under the line vty configuration. Which statement correctly identifies the VTY lines being configured?

1. A locally stored account that can be used to authenticate an inbound SSH session.
2. An encrypted protocol used for secure remote command-line access to a network device.
3. A public/private cryptographic key pair commonly generated on IOS to support SSH server operation.
4. Logical IOS terminal lines that receive remote CLI connections.

Correct Answer: D

 

Correct Answer

Answer D is correct because it accurately defines VTY lines. The matching definition is: Logical IOS terminal lines that receive remote CLI connections.

Incorrect Answers

Answer A is incorrect because the “Local username” option describes a different concept: a locally stored account that can be used to authenticate an inbound SSH session.

Answer B is incorrect because the “SSH” option describes a different concept: an encrypted protocol used for secure remote command-line access to a network device.

Answer C is incorrect because the “RSA key pair” option describes a different concept: a public/private cryptographic key pair commonly generated on IOS to support SSH server operation.

 

Question 19

For SSHv2, which statement is accurate?

1. An encrypted protocol used for secure remote command-line access to a network device.
2. A configured DNS-style domain value commonly used by IOS as part of RSA key generation prerequisites.
3. The modern SSH protocol version preferred over legacy SSH version 1.
4. The protection that makes SSH session contents unreadable to a passive network observer without the required keys.

Correct Answer: C

 

Correct Answer

Answer C is correct because the choice accurately describes SSHv2: The modern SSH protocol version preferred over legacy SSH version 1.

Incorrect Answers

Answer A is incorrect because the “SSH” option describes a different concept: an encrypted protocol used for secure remote command-line access to a network device.

Answer B is incorrect because the “Domain name” option describes a different concept: a configured DNS-style domain value commonly used by IOS as part of RSA key generation prerequisites.

Answer D is incorrect because the “Encryption” option describes a different concept: the protection that makes SSH session contents unreadable to a passive network observer without the required keys.

 

Question 20

For Encryption, which statement is accurate?

1. A configured DNS-style domain value commonly used by IOS as part of RSA key generation prerequisites.
2. The modern SSH protocol version preferred over legacy SSH version 1.
3. The protection that makes SSH session contents unreadable to a passive network observer without the required keys.
4. A public/private cryptographic key pair commonly generated on IOS to support SSH server operation.

Correct Answer: C

 

Correct Answer

Answer C is correct because the selected answer describes the protection that makes SSH session contents unreadable to a passive network observer without the required keys.

Incorrect Answers

Answer A is incorrect because the “Domain name” option describes a different concept: a configured DNS-style domain value commonly used by IOS as part of RSA key generation prerequisites.

Answer B is incorrect because the “SSHv2” option describes a different concept: the modern SSH protocol version preferred over legacy SSH version 1.

Answer D is incorrect because the “RSA key pair” option describes a different concept: a public/private cryptographic key pair commonly generated on IOS to support SSH server operation.