Question 1mediummultiple choice
Full question →mediummultiple choiceObjective-mapped
Which statement best describes why SSH is safer than Telnet for remote administration?
Answer choices
Why each option matters
Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.
A
Best answer
SSH encrypts the management session, while Telnet does not.
This is correct because encryption is the key security difference.
B
Distractor review
Telnet is safer because it is simpler.
This is wrong because simplicity does not make Telnet more secure.
C
Distractor review
SSH removes the need for usernames and passwords.
This is wrong because SSH does not remove authentication requirements.
D
Distractor review
Telnet is the required protocol for VLAN trunks.
This is wrong because Telnet has nothing to do with trunk operation.
Common exam trap
Common exam trap: answer the scenario, not the keyword
A frequent exam trap is the misconception that SSH removes the need for usernames and passwords, leading candidates to select that incorrect option. In reality, SSH requires authentication just like Telnet but secures the credentials by encrypting them during transmission. Another trap is assuming Telnet is safer because it is simpler, which ignores the critical security flaw of unencrypted data. Candidates must recognize that encryption of management sessions is the key security advantage of SSH over Telnet, not the presence or absence of authentication or protocol complexity.
Technical deep dive
How to think about this question
Secure Shell (SSH) is a network protocol designed to provide secure remote access to network devices by encrypting the entire management session. This encryption protects sensitive information such as usernames, passwords, and configuration commands from being intercepted by attackers during transmission. SSH uses cryptographic algorithms to establish a secure channel over an unsecured network, ensuring confidentiality and integrity of the data exchanged. In Cisco networking, SSH is the preferred protocol for remote device administration because it enforces encrypted communication and strong authentication mechanisms. When a network engineer connects to a Cisco router or switch using SSH, the session is encrypted end-to-end, preventing attackers from capturing plain-text credentials or commands. Telnet, by contrast, sends all data in clear text, which can be easily intercepted and exploited by malicious actors. This fundamental difference makes SSH the safer choice for managing network infrastructure. A common exam trap is confusing the security benefits of SSH with its authentication requirements. SSH does not eliminate the need for usernames and passwords; rather, it secures their transmission. Additionally, some may incorrectly believe Telnet is safer due to its simplicity, but simplicity does not equate to security. In practical network environments, SSH is widely implemented to comply with security policies and protect network devices from unauthorized access and data breaches.
KKey Concepts to Remember
- SSH encrypts all data exchanged during remote administration, protecting credentials and commands from interception on the network.
- Telnet transmits management sessions in clear text, making it vulnerable to eavesdropping and credential theft.
- Cisco devices prefer SSH over Telnet for secure remote management due to its use of strong encryption algorithms.
- SSH requires authentication with usernames and passwords or keys, maintaining secure access control despite encrypting the session.
- Telnet does not provide encryption or secure authentication methods, which exposes network devices to security risks.
- Encryption in transit is a fundamental security principle that SSH implements to safeguard device management traffic.
- Understanding the difference between encrypted and unencrypted protocols is critical for securing Cisco network infrastructure.
- SSH uses TCP port 22 by default, while Telnet uses TCP port 23, which is often blocked in secure environments.
TExam Day Tips
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Related practice questions
Related 200-301 practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
CCNA subnetting practice questions
Practise IPv4 subnetting, CIDR, masks, host ranges and subnet selection.
CCNA OSPF practice questions
Practise OSPF neighbours, router IDs, metrics, areas and routing-table interpretation.
CCNA VLAN practice questions
Practise VLANs, access ports, trunks, allowed VLANs and switching scenarios.
CCNA STP practice questions
Practise spanning tree, root bridge election, port roles and STP troubleshooting.
CCNA EtherChannel practice questions
Practise LACP, PAgP, port-channel behaviour and bundle requirements.
CCNA ACL practice questions
Practise standard and extended ACLs, permit/deny logic and traffic filtering.
CCNA NAT practice questions
Practise static NAT, dynamic NAT, PAT and inside/outside address translation.
CCNA DHCP practice questions
Practise DHCP scopes, relay, leases and troubleshooting.
CCNA show ip route practice questions
Practise routing-table output, longest-prefix match, AD and route selection.
CCNA show interfaces trunk practice questions
Practise trunk verification and VLAN forwarding across switches.
CCNA wireless security practice questions
Practise WLAN security, authentication and wireless architecture concepts.
CCNA IPv6 practice questions
Practise IPv6 addressing, routes, neighbour discovery and common IPv6 exam traps.
More questions from this exam
Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.
Question 1
A router learns the same prefix from both OSPF and EIGRP. Which route is installed by default?
Question 2
A router shows this output: R1#show ip ospf neighbor Neighbor ID Pri State Dead Time Address Interface 10.1.1.2 1 FULL/DR 00:00:34 192.168.12.2 GigabitEthernet0/0 10.1.1.3 1 2WAY/DROTHER 00:00:39 192.168.12.3 GigabitEthernet0/0 Which statement is correct?
Question 3
What is the OSPF metric called?
Question 4
A non-root switch has two uplinks toward the root bridge. One path has a lower total STP cost than the other. What role will the lower-cost uplink have?
Question 5
A router interface applies this ACL inbound: 10 deny tcp any any eq 80 20 permit ip any any A user reports that web browsing to a server by IP address fails, but ping works. Which statement best explains the behavior?
Question 6
A router learns route 198.51.100.0/24 from OSPF with AD 110 and also has a static route to the same prefix configured with AD 150. Which route is installed?
FAQ
Questions learners often ask
What does this 200-301 question test?
SSH encrypts all data exchanged during remote administration, protecting credentials and commands from interception on the network.
What is the correct answer to this question?
The correct answer is: SSH encrypts the management session, while Telnet does not. — SSH is safer because it encrypts the remote administrative session. In plain language, credentials and command traffic are protected while crossing the network, whereas Telnet sends that information in clear text. That makes SSH the preferred option for secure device management. This is one of the most foundational security comparisons in network administration. The correct answer is the one focused on encryption in transit.
What should I do if I get this 200-301 question wrong?
Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.
Discussion
Loading comments…
Sign in to join the discussion.