CCNA R&S Question of the Week: Secure Virtual Terminal Sessions

How can you secure the virtual terminal sessions on a router? (Choose two.)

A. Shut down the interface.
B. Physically secure the interface.
C. Create an access list and apply it to the virtual terminal interfaces with the access-group command.
D. Configure a virtual terminal password and login process.
E. Enter an access list and apply it to the virtual terminal interfaces using the access-class command.

Reveal Answer

Answer: D and E.

Answer A is incorrect because the virtual terminal sessions are not tied to any specific interface, they are considered inband management, so any interface on a router can be used to access the router. Answer B is also incorrect because we cannot physically secure a virtual session because it is “virtual.”

Answer C is incorrect, and answer E is correct because to apply an access list to a virtual terminal session we must use the “access-class” command. The “access-group” command is only used to apply an access list to a physical interface.

Answer D is also correct because the simplest way to secure the virtual terminal session is to configure a password to prevent unauthorized login.

Related Resources
Cisco White Papers

Related Course
CCNAX v2.0 — CCNA Routing and Switching Boot Camp
ICND1 v2.0 — Interconnecting Cisco Networking Devices, Part 1
ICND2 v2.0 — Interconnecting Cisco Networking Devices, Part 2

CCNA R&S Question of the Week Series

• CCNA R&S Question of the Week: Full-Duplex Ethernet Network
• CCNA R&S Question of the Week: OSI Model Layer
• CCNA R&S Question of the Week: Connection-Oriented Service
• CCNA R&S Question of the Week: No Acknowledgment of Receipt
• CCNA R&S Question of the Week: Switch vs. Hub
• CCNA R&S Question of the Week: Rapid STP States
• CCNA R&S Question of the Week: Rapid STP
• CCNA R&S Question of the Week: Secure Virtual Terminal Sessions

from
CERTIVIEW