Which two conditions must be met before SSH will operate normally on a Cisco IOS switch? (Choose two.)

For SSH to function on a Cisco IOS switch, two critical conditions must be met. First, the switch must be running an IOS image that supports cryptographic features, indicated by "k9" in the image name (e.g., c2960-lanbasek9-mz.150-2.SE.bin). These images contain the necessary encryption algorithms for secure communication. Second, the ip domain-name command must be configured. This command is essential because it's used in conjunction with the crypto key generate rsa command to create the RSA key pairs required for SSH authentication. Without a domain name, the switch cannot generate these keys. IP routing does not need to be enabled for SSH to work on a Layer 2 switch, as SSH operates at the application layer and only requires IP connectivity. A console password is a security best practice but not a prerequisite for SSH functionality. Telnet does not need to be disabled; SSH can operate concurrently with Telnet, although disabling Telnet is recommended for security.