What can be done to secure the virtual terminal interfaces on a router? (Choose two.)

Question:
What can be done to secure the virtual terminal interfaces on a router? (Choose two.)

• Administratively shut down the interface.
• Physically secure the interface.
• Create an access list and apply it to the virtual terminal interfaces with the access-group command.
• Configure a virtual terminal password and login process.
• Enter an access list and apply it to the virtual terminal interfaces using the access-class command.

Explanation: It is a waste to administratively shut down the interface. Moreover, someone can still access the virtual terminal interfaces via other interfaces -> We cannot physically secure a virtual interface because it is “virtual” -> To apply an access list to a virtual terminal interface we must use the “access-class” command. The “access-group” command is only used to apply an access list to a physical interface -> C is not correct. The simplest way to secure the virtual terminal interface is to configure a username & password to prevent unauthorized login.

Exam with this question: CCNA v3.0 (200-125) Study Guide – Exam Dumps