Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
mediumDrag & DropObjective-mapped
200-201 Practice Question: Drag and drop the steps to configure SSH access…
Drag and drop the steps to configure SSH access on a Cisco IOS switch into the correct order.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
1. Configure hostname and domain name 2. Generate RSA keys 3. Create a local user account 4. Configure VTY lines to use SSH transport
SSH configuration requires domain name, RSA keys, a local user, and enabling SSH on vty lines.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
1. Configure hostname and domain name 2. Generate RSA keys 3. Create a local user account 4. Configure VTY lines to use SSH transport
Why this is correct
This order ensures that the domain name is set before RSA key generation, as the keys require a domain name. Then a local user is created for authentication, and finally the VTY lines are configured to accept SSH connections.
- ✗
1. Generate RSA keys 2. Configure hostname and domain name 3. Create a local user account 4. Configure VTY lines to use SSH transport
Why it's wrong here
This order is incorrect because RSA key generation requires the domain name to be set first. Without a domain name, the key generation will fail or produce incomplete keys.
- ✗
1. Create a local user account 2. Configure hostname and domain name 3. Generate RSA keys 4. Configure VTY lines to use SSH transport
Why it's wrong here
This order is incorrect because the hostname and domain name should be configured before RSA key generation. Additionally, while creating the user before keys is not strictly wrong, it is not the typical sequence and may cause confusion if keys are not available for SSH.
- ✗
1. Configure VTY lines to use SSH transport 2. Generate RSA keys 3. Configure hostname and domain name 4. Create a local user account
Why it's wrong here
This order is incorrect because SSH cannot be enabled on VTY lines until encryption keys are generated, and key generation requires the domain name. Also, the local user must be created before SSH is attempted to allow authentication.
Quick reference
Asymmetric Encryption Algorithm Comparison
| Algorithm | Key Exchange | Signatures | Equivalent Security Key | Notes |
|---|---|---|---|---|
| RSA-3072 | Yes | Yes | 128-bit | Widely deployed; slow for bulk data |
| ECDSA P-256 | No | Yes | 128-bit | Fast signatures; standard TLS certs |
| ECDH / ECDHE | Yes | No | 128-bit | Perfect forward secrecy in TLS 1.3 |
| DH / DHE | Yes | No | 128-bit (3072-bit key) | Replaced by ECDHE in modern TLS |
| Ed25519 | No | Yes | ~128-bit | SSH keys, modern PKI |
Go deeper
Related to this question
About these practice questions
This 200-201 question is part of Courseiva's 979-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.