exam questions

Exam 200-301 All Questions

View all questions & answers for the 200-301 exam

Exam 200-301 topic 1 question 965 discussion

Actual exam question from Cisco's 200-301
Question #: 965
Topic #: 1
[All 200-301 Questions]

hostname CPE
service password-encryption

ip domain name ccna.cisco.com
ip name-server 198.51.100.210

crypto key generate rsa modulus 1024

username admin privilege 15 secret s0m3s3cr3t

line vty 0 4
transport input ssh
login local

Refer to the exhibit. An engineer executed the script and added commands that were not necessary for SSH and now must remove the commands. Which two commands must be executed to correct the configuration? (Choose two.)

  • A. no ip name-serveer 198.51.100.210
  • B. no login local
  • C. no service password-encryption
  • D. no ip domain mame ccna.cisco.com
  • E. no hostname CPE
Show Suggested Answer Hide Answer
Suggested Answer: AC 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
oatmealturkey
Highly Voted 1 year, 11 months ago
Selected Answer: AC
Login local is required to implement SSH in this case because we are not using AAA authentication. But password service-encryption is not needed because all it does is encrypt any plaintext passwords displayed in the running configuration. It has nothing to do with SSH. For example, you can configure a plaintext password for Telnet access, do service password-encryption to scramble it in the running config, but then when you Telnet into the device, sniff the packet and see that the password is still in plaintext.
upvoted 12 times
...
ahmt
Highly Voted 1 year, 11 months ago
Selected Answer: AC
SSH Configuration: hostname CPE ip domain name ccna.cisco.com crypto key generate rsa modulus 1024 username admin privilege 15 secret s0m3s3cr3t line vty 0 4 transport input ssh login local
upvoted 10 times
...
eb63e5a
Most Recent 8 months, 3 weeks ago
AB is correct SH can work without the "no login local" command. However, the "no login local" command is typically used in Cisco IOS devices when setting up SSH access to bypass the need for a local login on the device.
upvoted 1 times
...
MJBM
1 year, 8 months ago
According to Packet tracer the login local is not required but if you do not have the login local then you need the enable passwor/secret to access the privilege mode. Correct me if I´m wrong.
upvoted 1 times
...
Bhrino
1 year, 8 months ago
Selected Answer: AC
you need b to use the user name and pass word the answer is A and C
upvoted 2 times
...
bisiyemo1
1 year, 10 months ago
Selected Answer: AC
AC is correct
upvoted 2 times
...
JJY888
1 year, 10 months ago
Selected Answer: AC
You will know if you've been studying other material which I strongly suggest.
upvoted 2 times
...
Rynurr
1 year, 11 months ago
Selected Answer: AC
I agree, should be "AC"
upvoted 2 times
...
sdmejia01
1 year, 11 months ago
Selected Answer: AC
oatmealturkey is right. The answers are AC.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...