CCNA Network Services and Security Practice Question
Which two statements accurately describe why SSH is preferred over Telnet for device administration?
⚠ Common exam trap
Don't confuse protocol security features with ease of configuration or performance. Focus on security benefits.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SSH is generally considered the more secure choice for remote CLI administration.
SSH is preferred because it encrypts all traffic, including authentication credentials, making it secure for remote CLI administration, whereas Telnet transmits data in plaintext and is considered less secure. Option C is incorrect because SSH does not eliminate authentication; it requires authentication and often enforces stronger policies. Option D is false because SSH and Telnet are independent protocols; Telnet is not required for SSH to operate. Option E is wrong because SSH is used on routers, switches, firewalls, and many other devices, not only wireless controllers.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
SSH is generally considered the more secure choice for remote CLI administration.
Why this is correct
SSH is generally considered the more secure choice for remote CLI administration because it encrypts all traffic, providing data confidentiality and integrity. It also uses cryptographic host keys to authenticate the server, and supports secure password and public-key authentication for the user. These protections make SSH the preferred protocol for managing network devices remotely over untrusted networks.
- ✓
Telnet is generally considered less secure for remote device administration.
Why this is correct
Telnet is generally considered less secure because it transmits all data, including usernames and passwords, in plaintext over the network. This exposes credentials and configuration commands to anyone with a packet sniffer on the path between client and device. As a result, Telnet is treated as a legacy protocol that is insufficient for secure remote device administration.
- ✗
SSH eliminates the need for authentication and authorization policy.
Why it's wrong here
SSH provides a secure encrypted channel for remote administration, but it does not eliminate the need for authentication and authorization policies. Administrators still must implement AAA using local accounts, RADIUS, or TACACS+ to control which users can access the device and what commands they may execute. SSH only protects the transport layer; it does not define who is allowed to perform privileged actions.
When this WOULD be correct
If the question were to ask about a hypothetical protocol that provides access without any authentication or authorization requirements, then this option could be correct. For example, a question about a fictional remote access method that operates without security measures would validate this statement.
- ✗
Telnet is required before SSH can operate.
Why it's wrong here
Telnet is not a prerequisite for SSH; they are independent remote access protocols. SSH can operate on any network without Telnet being installed or configured. Telnet's only relationship is that it is an older, less secure alternative that SSH often replaces for administrative sessions.
When this WOULD be correct
In a different context, a question might ask about the relationship between protocols in a specific network setup where Telnet is used to establish a baseline for understanding SSH's enhancements. In that case, it could be framed that Telnet must be configured first before transitioning to SSH for secure communications.
- ✗
SSH is used only on wireless controllers and nowhere else.
Why it's wrong here
SSH is not limited to wireless controllers; it is a generic secure remote access protocol used on routers, switches, firewalls, servers, and many other IP-enabled devices. Wireless controllers are just one of many device types that support SSH for administrative access. The protocol is widely deployed wherever secure command-line management over a network is required.
When this WOULD be correct
In a question specifically asking about the use of SSH in a wireless networking context, where the focus is solely on wireless controllers, stating that SSH is used only on those devices could be correct if the question explicitly limits the scope to that environment.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓SSH is generally considered the more secure choice for remote CLI administration.Correct answer▾
Why this is correct
SSH is generally considered the more secure choice for remote CLI administration because it encrypts all traffic, providing data confidentiality and integrity. It also uses cryptographic host keys to authenticate the server, and supports secure password and public-key authentication for the user. These protections make SSH the preferred protocol for managing network devices remotely over untrusted networks.
✗SSH eliminates the need for authentication and authorization policy.Wrong answer — click to see why▾
Why this is wrong here
SSH does not eliminate the need for authentication and authorization policies; it only provides a secure transport layer. Network devices still require AAA (Authentication, Authorization, and Accounting) or local username/password configurations to control access.
★ When this WOULD be the correct answer
If the question were to ask about a hypothetical protocol that provides access without any authentication or authorization requirements, then this option could be correct. For example, a question about a fictional remote access method that operates without security measures would validate this statement.
Why candidates choose this
Students might think that encryption alone handles security entirely, overlooking that access control policies are separate from the encryption protocol. The term 'secure' in SSH can be misinterpreted as covering all security aspects.
✗Telnet is required before SSH can operate.Wrong answer — click to see why▾
Why this is wrong here
Telnet is not a prerequisite for SSH; they are independent protocols. SSH can be configured and used on a device without Telnet ever being enabled. In fact, many devices have SSH enabled by default while Telnet is disabled for security reasons.
★ When this WOULD be the correct answer
In a different context, a question might ask about the relationship between protocols in a specific network setup where Telnet is used to establish a baseline for understanding SSH's enhancements. In that case, it could be framed that Telnet must be configured first before transitioning to SSH for secure communications.
Why candidates choose this
Some might think SSH is an extension or upgrade of Telnet, similar to how HTTPS is related to HTTP. However, SSH is a completely different protocol with its own handshake and encryption mechanisms.
✗SSH is used only on wireless controllers and nowhere else.Wrong answer — click to see why▾
Why this is wrong here
SSH is not limited to wireless controllers; it is widely used on routers, switches, firewalls, servers, and many other network devices. It is a universal protocol for secure remote administration across all types of infrastructure.
★ When this WOULD be the correct answer
In a question specifically asking about the use of SSH in a wireless networking context, where the focus is solely on wireless controllers, stating that SSH is used only on those devices could be correct if the question explicitly limits the scope to that environment.
Why candidates choose this
A student might have only seen SSH used on wireless controllers in a lab or specific scenario, leading to the incorrect assumption that it is exclusive to those devices. The broad applicability of SSH is often underestimated.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Device File Management with SFTP and SCP
Key term
Telnet
Telnet is a network protocol that provides a bidirectional, interactive text-based communication session between two machines over a network, typically used for remote access and management of network devices.
Key term
SSH
SSH (Secure Shell) is a cryptographic network protocol that provides secure, encrypted communication and remote administration between two devices over an unsecured network.
About these practice questions
Courseiva writes every 200-301 question from scratch — 1,389 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.