Question 280
After implementing a correction at a research institution in Helsinki, engineers must verify that this original problem is resolved: A VTY line allows Telnet login even though the management policy requires encrypted CLI access. Which observed result BEST demonstrates success?
Explanation
Correct Answer
This is the observable outcome for ssh transport restriction. It tests whether the targeted change, 'Limit the VTY transport input to SSH and maintain the approved authentication policy', actually resolved the reported issue at a research institution in Helsinki. The original failure was: A VTY line allows Telnet login even though the management policy requires encrypted CLI access.
Incorrect Answers
That observation verifies ssh source interface routing in a different situation, such as when management SSH works from one site but not another because replies leave through an unintended VRF or source path. For the reported ssh transport restriction incident at a research institution in Helsinki, the required acceptance evidence is: SSH succeeds while Telnet connection attempts are not accepted on the management lines. This other result does not test that condition directly.
That observation verifies vty access-class management acl in a different situation, such as when untrusted subnets can open the router's SSH port even though the routing interfaces have unrelated ACLs. For the reported ssh transport restriction incident at a research institution in Helsinki, the required acceptance evidence is: SSH succeeds while Telnet connection attempts are not accepted on the management lines. This other result does not test that condition directly.
That observation verifies https management instead of http in a different situation, such as when router web-management credentials traverse an unencrypted HTTP service despite a secure management requirement. For the reported ssh transport restriction incident at a research institution in Helsinki, the required acceptance evidence is: SSH succeeds while Telnet connection attempts are not accepted on the management lines. This other result does not test that condition directly.