Which VTY configuration allows only secure remote access, requires only a password, and times out idle EXEC sessions after 60 minutes?

The correct answer uses login password to enforce password-only authentication, which is a simpler method than AAA. transport input ssh restricts access to SSH, ensuring secure remote access. exec-timeout 60 correctly sets the idle session timeout to 60 minutes (60 seconds 60 minutes = 3600 seconds, but exec-timeout uses minutes by default for the first parameter). The first incorrect option password Cisco123 is incomplete; it requires login to be explicitly configured for password authentication. The third option transport input telnet ssh allows insecure Telnet access, violating the "secure remote access" requirement. The fourth option uses session-timeout, which is not a valid command for VTY lines; exec-timeout is the correct command for idle session timeouts.