N10-009 Network Implementation Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Generate RSA key pair.

  Why it's wrong here

  Generating an RSA key pair is a crucial step for enabling secure SSH communication, as these keys are used for encryption and authentication. However, a switch cannot generate cryptographic keys until it has a configured hostname and an IP domain name. More importantly, without an IP address on a management interface, the switch lacks network reachability, making any SSH-related configuration, including key generation, premature for establishing remote access.

• ✗

  Configure a VTY password.

  Why it's wrong here

  Configuring a password for the Virtual Teletype (VTY) lines is an essential security measure for authenticating users who attempt to log in via SSH or Telnet. While critical for preventing unauthorized access, setting a VTY password is a step that assumes the switch is already network-reachable. Without an IP address configured on a management interface, no remote connection can be established to the VTY lines, rendering the password configuration ineffective for initial remote access.

  When this WOULD be correct

  This option would be correct in a question where the switch already has an IP address configured on the management VLAN, and the next step is to secure VTY lines for SSH access. For example: 'After assigning an IP to the management VLAN, what must be configured to allow SSH login?'

• ✗

  Enable SSH version 2.

  Why it's wrong here

  Enabling SSH version 2 is a vital security measure, ensuring that the switch uses the more robust and secure protocol version for remote management. Nevertheless, this command is dependent on prior configurations to be effective. The switch must first have an IP address for network connectivity and a generated RSA key pair to perform the necessary cryptographic operations. Attempting to enable SSH without these foundational elements would result in a non-functional or insecure remote access solution.

• ✓

  Configure an IP address on the management VLAN.

  Why this is correct

  Configuring an IP address on the management VLAN's Switch Virtual Interface (SVI) is the absolute foundational step for remote management via SSH. Without a unique IP address, the switch is not discoverable or reachable over the network at Layer 3, preventing any SSH client from initiating a connection. This IP address provides the essential network identity and connectivity required before any higher-level security or access protocols can function for remote administration.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Go deeper

Related to this question