Exam 350-501 topic 1 question 37 discussion

B: I assume the access-list 100 does not exist yet, hence all traffic should accepted. C: login local is configures, so authentication is based on AAA/local users and not a password under line vty. E: Only ensures, the passwords of type 7 are "encrypted" in the configuration. So I assume A and D is correct, even though this I also 100% correct in my opinion. SSH key can be configured with a label, so the domain name is not needed. crypto key generate rsa modulus 2048 label SSH_KEY

should be A and D

There are four steps required to enable SSH support on a Cisco IOS router: Configure the hostname command. Configure the DNS domain. Generate the SSH key to be used. Enable SSH transport support for the virtual type terminal (vtys). https://www.cisco.com/c/en/us/support/docs/security-vpn/secure-shell-ssh/4145-ssh.html

To enable SSH you need to configure IP domain name + generate crypto keys So A & D are correct in my choice. B is wrong because you do not need an ACL to enable port 22 for SSH C is wrong because when you have login local you do no need a pass under VTY and E is totally out of the scope of the question it is another thing

A and D, are correct!

I think it should be A and D. if you don`t have an ip domain-name you cannot connect using ssh.