300-440 Question 253
Select 2A network engineer is configuring remote access to a Cisco router. The engineer wants to ensure secure management access while also allowing secure file transfers to the router. Which protocol(s) should the engineer configure on the router to meet these requirements?
- A
Telnet
- B
HTTP
- C
HTTPS
- D
SSH
- E
SCP
Show answer and explanation
Correct answers: D, E
Explanation
To meet the requirements of secure management access and secure file transfers, the engineer should configure both SSH and SCP. SSH provides encrypted remote CLI management, while SCP (which operates over SSH) enables secure file transfers. Telnet and HTTP are not secure, and HTTPS is not applicable for CLI-based remote management or file transfers.
- A. Incorrect.
Telnet is not secure as it transmits data, including credentials, in plaintext. Therefore, it is not recommended for secure management access.
- B. Incorrect.
HTTP is not secure because it transmits data in plaintext, making it unsuitable for secure communication or management.
- C. Incorrect.
HTTPS is a secure protocol for web-based interfaces, but it does not support CLI-based remote access or file transfers. It is not applicable in this scenario.
- D. Correct.
SSH is a secure protocol that supports encrypted communication for CLI-based remote management, making it suitable for secure access to the router.
- E. Correct.
SCP (Secure Copy Protocol) allows secure file transfers over SSH. It complements SSH for securely transferring files to the router.