Question

A network administrator is hardening a Catalyst switch that is currently managed over Telnet. Company policy requires that all remote CLI management traffic be encrypted, while console access remains available for local troubleshooting. The switch already has an IP address on its management VLAN and a default gateway configured. Which set of actions will enable secure remote CLI management?

Accepted Answer

Configure a hostname and domain name, generate RSA crypto keys, create a local username/password, and set 'transport input ssh' on the VTY lines

Answer

Enable the HTTP server, apply an access list to the VTY lines, and set 'transport input telnet' with a login password

Answer

Generate RSA keys, then apply 'transport input all' on the console line and configure an enable secret

Answer

Configure a banner MOTD, set a VTY password with 'login', and leave 'transport input telnet ssh' on the VTY lines