SSH-v3-only in-bond access.

[Marc du]

Hello Guys

is it B , C , F

 An engineer is deploying SSH-v3-only in-bond access. Which three options reflect the minimum of required commands on this router?

A) Define a hostname for the device
B) Define a domain name for this device
C) Configure a key modulus in the global configuration
D) Add router hostname on DNS services
E) Create an access list that defines authorized hosts for SSH
F) Create crypto keys by using the “Crypto key generate Rsa” command

[Mark Malone]

whats the context here or where did you get this from are you trying to implement sshv3 ?

[Peter Paluch]

Mark,

This looks like some assessment or certification exam item. But two things bother me about it:

• SSHv3 - I've never heard of it. To my best knowledge, SSHv2 is the newest SSH version, and there is no such thing as SSHv3.
• "in-bond" - I've never heard of this, either. Should that be "in-band"?

Assuming that it was really meant to be SSHv2, and "in-band", then A+B+F are correct, but they will not make sure that it is SSHv2-only. For that, the ip ssh version 2 would need to be configured as well and this option is not given in the answers.

Best regards,
Peter

[Mark Malone]

Hi Peter

yes that's why I was asking where it came from I had never seen sshv3 either and I didn't want to be answering someone's class work either

Thanks Mark

[Peter Paluch]

Hi Mark,

If someone got this for a homework then it's a rather poor assignment :)

Best regards,
Peter

[Mark Malone]

Yes I just wanted to be sure :) Leo pointed out to me yesterday I was actually doing someone's course work before he let know

[Peter Paluch]

Mark,

Leo's got a keen eye on these incidents :) As far as I am concerned, I don't make much of these occurrences if it is just a single item to answer. It happens every so often that exam items in various assessments, even in Networking Academy and certification exams, are poorly worded and the given answers are either incorrect or inconclusive. The student is not to blame for this, and we should not cut him off in these cases.

Best regards,
Peter

[Marc du]

LoL :)

there is not SSHv3 , its miss-typo dude its SSHv2

Indeed its In band not oubond

so its A,B,F

what about option C???

Configure a key modulus in the global configuration , this Q makes my Brain Frozen

Thanks all

[Mark Malone]

C is correct as well usually you would set an acl on the vty to say who can access as you don't want open access but there asking whats the minimum to get up and running and can only be 3 , if your missing ab or f ssh wont work anyway , acl is optional but considered best practice