To replace Telnet with SSH and increase the RSA modulus to 2048 on new Catalyst switches, which two commands are required? (Choose two.)
Choose an answer
Tap an option to check your answer.
Correct answer: transport input ssh, crypto key generate rsa modulus 2048.
Why this is the answer
The transport input ssh command configures the VTY lines (virtual terminal lines used for remote access) to accept only SSH connections, thereby replacing Telnet. This enhances security by encrypting management traffic. The crypto key generate rsa modulus 2048 command generates an RSA key pair with a modulus of 2048 bits, which is a recommended secure key size for SSH. Without an RSA key, SSH cannot function. transport input all would allow both Telnet and SSH, which doesn't replace Telnet. crypto key generate rsa general-keys modulus 1024 generates a key, but with a smaller, less secure 1024-bit modulus. crypto key generate rsa usage-keys generates separate RSA keys for signing and encryption, which is not the standard or required command for basic SSH setup on Cisco switches.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed