300-440 Question 250
Select 4A network administrator wants to secure remote and local access to a Cisco router. They have configured the console line with a password and enabled login. Additionally, they want to enforce SSH as the only method for remote access via VTY lines. Which of the following commands are required to ensure this configuration?
- A
line vty 0 4
- B
transport input ssh
- C
password cisco
- D
login local
- E
enable secret password123
- F
line console 0
Show answer and explanation
Correct answers: A, B, D, F
Explanation
To secure both console and VTY access, the administrator must configure the console line for local authentication using 'line console 0' and the VTY lines using 'line vty 0 4'. For VTY, SSH is enforced as the only remote access method with 'transport input ssh', and 'login local' ensures the use of the local user database for authentication. The commands 'password cisco' and 'enable secret' are unrelated to this specific requirement.
- A. Correct.
This command is required to access and configure the VTY lines for remote access.
- B. Correct.
This command ensures that only SSH is used for remote access on the VTY lines, disabling unsecure methods like Telnet.
- C. Incorrect.
This command is used to configure a password on the VTY lines, but it is not required when using 'login local' with local user database authentication.
- D. Correct.
This command ensures that the VTY lines use the local user database for authentication, which is more secure than a simple password.
- E. Incorrect.
This command sets the enable password for privileged EXEC mode but is unrelated to securing the console or VTY lines.
- F. Correct.
This command is required to access and configure the console line for local access.