Exam 350-401 topic 1 question 850 discussion

for vty only input is needed. and you need a crypto key for ssh

only input ssh is needed

SSH by default runs in compatibility mode; that is, both SSH Version 1 and SSH Version 2 connections are honored. https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960l/software/15-2_6_e/configuration_guide/b_1526e_consolidated_2960l_cg/m_sec_ssh_v2_cauvery.html

There are four steps required to enable SSH support on a Cisco IOS router: 1. Configure the hostname command. hostname router (already configured) 2. Configure the DNS domain. ip domain-name cisco.com (already configured) 3. Generate the SSH key crypto key generate rsa modulus 2048 (missing, and Must be configured) 4. Enable SSH transport support for the vty line vty 0 15 transport input SSH (already configured) https://www.cisco.com/c/en/us/support/docs/security-vpn/secure-shell-ssh/4145-ssh.html

enable remote access only using SSHv1 or SSHv2: 1. we need to add relevant commands to achieve SSH secure access 2. generates an RSA key first, which is required to enable SSH. 3. enters VTY mode 4. transport input ssh -> only SSH connections are allowed on the VTY line

B is correct

B. RSA key must be generated

Please indicate why the answer is C with evidence, team. It would be helpful. I as well see the answer as B, but am willing to be educated on why I am wrong.

correct B