Topic 15 Practice Test 2 covers SSH, TFTP, and FTP for Cisco Certified Network Associate 200-301 CCNA and maps to objectives 4.8–4.9. For broader exam preparation, review the Cisco CCNA 200-301 Exam Dumps. Every option includes focused technical reasoning explaining both the networking concept and its fit to the scenario.
Question 1
An engineer attempts to create SSH RSA keys on a freshly initialized IOS device, but key generation cannot proceed because the device identity information is incomplete. Which option should the engineer use or identify? Choose ONE.
- login local on VTY lines
- Hostname and IP domain name before RSA key generation
- VTY lines
- SCP over SSH
Correct Answer: B
Correct Answer
Answer B is correct because Hostname and IP domain name before RSA key generation provides the missing identity prerequisites before RSA key generation. In a Hostname and IP use case, it is appropriate when Use these identity settings as prerequisites in the standard SSH server setup workflow. The observed behavior aligns with that role.
Incorrect Answers
Answer A is incorrect because login local on concerns this behavior: The login local command tells VTY lines. The operations evidence favors Hostname and IP; login local on operates at another control point. The Hostname and IP result depends on another mechanism, not the login local on behavior described above.
Answer C is incorrect because VTY lines concerns this behavior: Virtual terminal lines are the logical lines. The required Hostname and IP outcome differs from the VTY lines purpose in this operations case. For Hostname and IP, choosing VTY lines would change the control point in this operations case.
Answer D is incorrect because SCP over SSH concerns this behavior: SCP uses SSH as its secure transport. Using SCP over SSH would not produce the Hostname and IP behavior shown by this operations evidence. The SCP over SSH function therefore differs materially from the Hostname and IP outcome required here.
Question 2
A router has a hostname, domain name, local user, and VTY settings, yet the SSH server still has no host key material. Which option should the engineer use or identify? Choose ONE.
- transport input ssh
- show ip ssh
- RSA key pair generation
- Hostname and IP domain name before RSA key generation
Correct Answer: C
Correct Answer
Answer C is correct because RSA key pair generation provides the cryptographic key material required for the IOS SSH server. In a RSA key pair use case, it is appropriate when Generate RSA keys after the device identity prerequisites are in place. The observed behavior aligns with that role.
Incorrect Answers
Answer A is incorrect because transport input ssh concerns this behavior: The transport input ssh command restricts VTY. The required RSA key pair outcome differs from the transport input ssh purpose in this operations case. For RSA key pair, choosing transport input ssh would change the control point in this operations case.
Answer B is incorrect because show ip ssh concerns this behavior: The show ip ssh command displays IOS. Using show ip ssh would not produce the RSA key pair behavior shown by this operations evidence. The show ip ssh function therefore differs materially from the RSA key pair outcome required here.
Answer D is incorrect because Hostname and IP concerns this behavior: Cisco IOS SSH setup commonly establishes a. In the operations case, RSA key pair differs from Hostname and IP behavior. Operationally, RSA key pair needs another behavior than Hostname and IP provides in this operations case.
Question 3
The design uses device-local authentication for SSH, but no named administrator credential exists in the local database. Which option should the engineer use or identify? Choose ONE.
- ip ssh version 2
- SSH encrypted management session
- RSA key pair generation
- Local username with a secret
Correct Answer: D
Correct Answer
Answer D is correct because Local username with a secret provides a device-local credential for a remote administrator. In a Local username with use case, it is appropriate when Use a local account when the device should authenticate SSH users from its own configuration. The observed behavior aligns with that role.
Incorrect Answers
Answer A is incorrect because ip ssh version concerns this behavior: The ip ssh version 2 command forces. Using ip ssh version would not produce the Local username with behavior shown by this operations evidence. The ip ssh version function therefore differs materially from the Local username with outcome required here.
Answer B is incorrect because SSH encrypted management concerns this behavior: SSH protects the interactive management session with. In the operations case, Local username with differs from SSH encrypted management behavior. Operationally, Local username with needs another behavior than SSH encrypted management provides in this operations case.
Answer C is incorrect because RSA key pair concerns this behavior: The SSH server needs a public/private key. RSA key pair misses the Local username with decision in this operations scenario. For RSA key pair, separation from Local username with remains material in this operations scenario.
Question 4
A local administrator account exists, but the VTY lines still use only a line password instead of checking the local username database. Which option should the engineer use or identify? Choose ONE.
- login local on VTY lines
- VTY lines
- SCP over SSH
- Local username with a secret
Correct Answer: A
Correct Answer
Answer A is correct because login local on VTY lines provides VTY authentication against the local user database. In a login local on use case, it is appropriate when locally configured usernames and secrets should control VTY access. The observed behavior aligns with that role.
Incorrect Answers
Answer B is incorrect because Virtual terminal lines are the logical lines that receive remote CLI sessions such as SSH and Telnet VTY lines misses the login local on decision in this operations scenario. For VTY lines, separation from login local on remains material in this operations scenario.
Answer C is incorrect because SCP uses SSH as its secure transport to copy files with authentication and encryption For login local on, the operations evidence requires another function than SCP over SSH. Using SCP over SSH here would leave the login local on requirement unresolved during this operations task.
Answer D is incorrect because Local username with concerns this behavior: A local user account stores a username. For login local on, the operations evidence requires another function than Local username with. Using Local username with here would leave the login local on requirement unresolved during this operations task.
Question 5
Security policy requires VTY connections to reject Telnet while continuing to accept SSH sessions. Which option should the engineer use or identify? Choose ONE.
- show ip ssh
- transport input ssh
- Hostname and IP domain name before RSA key generation
- login local on VTY lines
Correct Answer: B
Correct Answer
Answer B is correct because transport input ssh provides an inbound VTY transport policy that permits only SSH. In a transport input ssh use case, it is appropriate when remote CLI management must accept SSH and reject Telnet. The observed behavior aligns with that role.
Incorrect Answers
Answer A is incorrect because The show ip ssh command displays IOS SSH server status and parameters such as version and timeout information For transport input ssh, the operations evidence requires another function than show ip ssh.
Answer C is incorrect because Cisco IOS SSH setup commonly establishes a hostname and IP domain name so the device has the identity context used when generating RSA keys The operations evidence favors transport input ssh; Hostname and IP operates at another control point.
Answer D is incorrect because The login local command tells VTY lines to authenticate incoming sessions against the local username database The required transport input ssh outcome differs from the login local on purpose in this operations case.
Question 6
A hardening standard requires the IOS SSH server to accept only the newer protocol version rather than permitting legacy negotiation. Which option should the engineer use or identify? Choose ONE.
- SSH encrypted management session
- RSA key pair generation
- ip ssh version 2
- transport input ssh
Correct Answer: C
Correct Answer
Answer C is correct because ip ssh version 2 provides an IOS setting that restricts the SSH server to version 2. In a ip ssh version use case, it is appropriate when the management baseline requires SSHv2. The observed behavior aligns with that role.
Incorrect Answers
Answer A is incorrect because SSH protects the interactive management session with encryption and server cryptographic keys, unlike clear-text Telnet The operations evidence favors ip ssh version; SSH encrypted management operates at another control point. The ip ssh version result depends on another mechanism, not the SSH encrypted management behavior described above.
Answer B is incorrect because The SSH server needs a public/private key pair so it can perform cryptographic key operations for secure sessions The required ip ssh version outcome differs from the RSA key pair purpose in this operations case.
Answer D is incorrect because The transport input ssh command restricts VTY inbound transport to SSH instead of allowing insecure Telnet access Using transport input ssh would not produce the ip ssh version behavior shown by this operations evidence.
Question 7
An engineer needs to change authentication and permitted transport protocols specifically for incoming remote CLI sessions. Which option should the engineer use or identify? Choose ONE.
- SCP over SSH
- Local username with a secret
- ip ssh version 2
- VTY lines
Correct Answer: D
Correct Answer
Answer D is correct because VTY lines provides the configuration context that governs remote CLI sessions. In a VTY lines use case, it is appropriate when Configure authentication and permitted transports under the VTY lines for remote terminal access. The observed behavior aligns with that role.
Incorrect Answers
Answer A is incorrect because SCP over SSH is used when Use SCP when file transfer confidentiality matters and SSH is already enabled. Using SCP over SSH would not produce the VTY lines behavior shown by this operations evidence.
Answer B is incorrect because A local user account stores a username and protected secret that can authenticate management sessions when local login is selected Using Local username with would not produce the VTY lines behavior shown by this operations evidence.
Answer C is incorrect because The ip ssh version 2 command forces SSH version 2 rather than permitting an older protocol version In the operations case, VTY lines differs from ip ssh version behavior. Operationally, VTY lines needs another behavior than ip ssh version provides in this operations case.
Question 8
After configuring SSH, the engineer wants a command that reports the SSH server version and operational status without opening a new session. Which option should the engineer use or identify? Choose ONE.
- show ip ssh
- Hostname and IP domain name before RSA key generation
- login local on VTY lines
- VTY lines
Correct Answer: A
Correct Answer
Answer A is correct because show ip ssh provides verification of SSH server status and negotiated configuration settings. In a show ip ssh use case, it is appropriate when verify the device-side SSH service configuration. The observed behavior aligns with that role.
Incorrect Answers
Answer B is incorrect because Hostname and IP is used when Use these identity settings as prerequisites in the standard SSH server setup workflow. In the operations case, show ip ssh differs from Hostname and IP behavior.
Answer C is incorrect because login local on is used when locally configured usernames and secrets should control VTY access. login local on misses the show ip ssh decision in this operations scenario. For login local on, separation from show ip ssh remains material in this operations scenario.
Answer D is incorrect because VTY lines is used when Configure authentication and permitted transports under the VTY lines for remote terminal access. For show ip ssh, the operations evidence requires another function than VTY lines.
Question 9
Administrators must manage a router across an untrusted network without exposing terminal commands and credentials in clear text. Which option should the engineer use or identify? Choose ONE.
- RSA key pair generation
- SSH encrypted management session
- transport input ssh
- show ip ssh
Correct Answer: B
Correct Answer
Answer B is correct because SSH encrypted management session provides encrypted remote CLI management rather than clear-text terminal access. In a SSH encrypted management use case, it is appropriate when Use SSH for remote CLI administration across networks that should not expose credentials and commands. The observed behavior aligns with that role.
Incorrect Answers
Answer A is incorrect because RSA key pair is used when Generate RSA keys after the device identity prerequisites are in place. RSA key pair misses the SSH encrypted management decision in this operations scenario. For RSA key pair, separation from SSH encrypted management remains material in this operations scenario.
Answer C is incorrect because transport input ssh is used when remote CLI management must accept SSH and reject Telnet. For SSH encrypted management, the operations evidence requires another function than transport input ssh. Using transport input ssh here would leave the SSH encrypted management requirement unresolved during this operations task.
Answer D is incorrect because show ip ssh is used when verify the device-side SSH service configuration. The operations evidence favors SSH encrypted management; show ip ssh operates at another control point. The SSH encrypted management result depends on another mechanism, not the show ip ssh behavior described above.
Question 10
A configuration file must be copied to a router across an untrusted path using an authenticated encrypted transfer tied to SSH. Which option should the engineer use or identify? Choose ONE.
- Local username with a secret
- ip ssh version 2
- SCP over SSH
- SSH encrypted management session
Correct Answer: C
Correct Answer
Answer C is correct because SCP over SSH provides a secure authenticated file copy that rides on SSH. In a SCP over SSH use case, it is appropriate when Use SCP when file transfer confidentiality matters and SSH is already enabled. The observed behavior aligns with that role.
Incorrect Answers
Answer A is incorrect because Local username with is used when Use a local account when the device should authenticate SSH users from its own configuration. For SCP over SSH, the operations evidence requires another function than Local username with.
Answer B is incorrect because ip ssh version is used when the management baseline requires SSHv2. The operations evidence favors SCP over SSH; ip ssh version operates at another control point. The SCP over SSH result depends on another mechanism, not the ip ssh version behavior described above.
Answer D is incorrect because SSH encrypted management is used when Use SSH for remote CLI administration across networks that should not expose credentials and commands. The required SCP over SSH outcome differs from the SSH encrypted management purpose in this operations case.
Question 11
A provisioning host offers a lightweight boot-file service, and a firewall rule must permit the protocol’s well-known UDP service port. Which option should the engineer use or identify? Choose ONE.
- FTP control connection on TCP port 21
- FTP rather than TFTP for authenticated sessions
- show running-config on VTY transport and login settings
- TFTP using UDP port 69
Correct Answer: D
Correct Answer
Answer D is correct because TFTP using UDP port 69 provides the lightweight UDP-based file-transfer service used by many boot and configuration workflows. In a TFTP using UDP use case, it is appropriate when Use it for simple trusted-network transfers where low protocol overhead is more important than rich session features. The observed behavior aligns with that role.
Incorrect Answers
Answer A is incorrect because FTP control connection concerns this behavior: FTP uses a TCP control connection, normally. FTP control connection misses the TFTP using UDP decision in this operations scenario. For FTP control connection, separation from TFTP using UDP remains material in this operations scenario.
Answer B is incorrect because FTP rather than concerns this behavior: FTP offers authenticated, session-oriented file transfer, whereas. For TFTP using UDP, the operations evidence requires another function than FTP rather than. Using FTP rather than here would leave the TFTP using UDP requirement unresolved during this operations task.
Answer C is incorrect because show running-config on concerns this behavior: Reviewing the VTY section of the running. The operations evidence favors TFTP using UDP; show running-config on operates at another control point. The TFTP using UDP result depends on another mechanism, not the show running-config on behavior described above.
Question 12
A team selects a simple transfer protocol for a trusted isolated LAN and must account for the fact that the protocol has no native username/password login. Which option should the engineer use or identify? Choose ONE.
- TFTP without built-in user authentication
- FTP username/password authentication
- TFTP rather than FTP for minimal boot service
- TFTP using UDP port 69
Correct Answer: A
Correct Answer
Answer A is correct because TFTP without built-in user authentication provides a simple transfer protocol that does not natively authenticate users. In a TFTP without built-in use case, it is appropriate when Use it only where the surrounding network and server controls provide the necessary trust. The observed behavior aligns with that role.
Incorrect Answers
Answer B is incorrect because FTP username/password authentication concerns this behavior: Traditional FTP can authenticate users with credentials. For TFTP without built-in, the operations evidence requires another function than FTP username/password authentication. Using FTP username/password authentication here would leave the TFTP without built-in requirement unresolved during this operations task.
Answer C is incorrect because TFTP rather than concerns this behavior: TFTP has a small protocol footprint and. The operations evidence favors TFTP without built-in; TFTP rather than operates at another control point. The TFTP without built-in result depends on another mechanism, not the TFTP rather than behavior described above.
Answer D is incorrect because TFTP using UDP concerns this behavior: TFTP is a lightweight file-transfer protocol that. The required TFTP without built-in outcome differs from the TFTP using UDP purpose in this operations case. For TFTP without built-in, choosing TFTP using UDP would change the control point in this operations case.
Question 13
A small lab needs the simplest way to move a known startup configuration between a router and a trusted local server; account-based authentication is not required. Which option should the engineer use or identify? Choose ONE.
- FTP reliable TCP transport
- TFTP simple configuration or image transfer
- Separate FTP control and data connections
- TFTP without built-in user authentication
Correct Answer: B
Correct Answer
Answer B is correct because TFTP simple configuration or image transfer provides a minimal transfer of a known configuration file on a trusted management LAN. In a TFTP simple configuration use case, it is appropriate when controlled networks for simple reads or writes of known files. The observed behavior aligns with that role.
Incorrect Answers
Answer A is incorrect because FTP reliable TCP concerns this behavior: FTP relies on TCP, which provides connection-oriented. The operations evidence favors TFTP simple configuration; FTP reliable TCP operates at another control point. The TFTP simple configuration result depends on another mechanism, not the FTP reliable TCP behavior described above.
Answer C is incorrect because Separate FTP control concerns this behavior: Traditional FTP uses a control connection for. The required TFTP simple configuration outcome differs from the Separate FTP control purpose in this operations case. For TFTP simple configuration, choosing Separate FTP control would change the control point in this operations case.
Answer D is incorrect because TFTP without built-in concerns this behavior: TFTP provides a very simple read/write file. Using TFTP without built-in would not produce the TFTP simple configuration behavior shown by this operations evidence. The TFTP without built-in function therefore differs materially from the TFTP simple configuration outcome required here.
Question 14
A firewall trace shows the client establishing the command channel used for FTP logins and transfer commands. The engineer must identify the well-known TCP control port. Which option should the engineer use or identify? Choose ONE.
- FTP rather than TFTP for authenticated sessions
- show running-config on VTY transport and login settings
- FTP control connection on TCP port 21
- TFTP simple configuration or image transfer
Correct Answer: C
Correct Answer
Answer C is correct because FTP control connection on TCP port 21 provides the TCP control channel that carries FTP commands and responses. In a FTP control connection use case, it is appropriate when a stateful authenticated file-transfer session with FTP semantics is required. The observed behavior aligns with that role.
Incorrect Answers
Answer A is incorrect because FTP offers authenticated, session-oriented file transfer, whereas TFTP is intentionally simple and lacks native user authentication Using FTP rather than would not produce the FTP control connection behavior shown by this operations evidence.
Answer B is incorrect because Reviewing the VTY section of the running configuration reveals the configured authentication method and permitted inbound transports In the operations case, FTP control connection differs from show running-config on behavior. Operationally, FTP control connection needs another behavior than show running-config on provides in this operations case.
Answer D is incorrect because TFTP simple configuration concerns this behavior: TFTP is commonly used for straightforward network-device. In the operations case, FTP control connection differs from TFTP simple configuration behavior. Operationally, FTP control connection needs another behavior than TFTP simple configuration provides in this operations case.
Question 15
The file server requires each network administrator to present an account name and password before transferring an IOS image with the legacy protocol. Which option should the engineer use or identify? Choose ONE.
- TFTP rather than FTP for minimal boot service
- TFTP using UDP port 69
- FTP control connection on TCP port 21
- FTP username/password authentication
Correct Answer: D
Correct Answer
Answer D is correct because FTP username/password authentication provides an account-authenticated file-transfer session using the FTP protocol. In a FTP username/password authentication use case, it is appropriate when a file server requires account-based access and encryption is not the stated requirement. The observed behavior aligns with that role.
Incorrect Answers
Answer A is incorrect because TFTP has a small protocol footprint and is widely used for simple boot or configuration transfers on controlled networks In the operations case, FTP username/password authentication differs from TFTP rather than behavior.
Answer B is incorrect because TFTP is a lightweight file-transfer protocol that uses UDP, with requests directed to well-known port 69 TFTP using UDP misses the FTP username/password authentication decision in this operations scenario. For TFTP using UDP, separation from FTP username/password authentication remains material in this operations scenario.
Answer C is incorrect because FTP uses a TCP control connection, normally to server port 21, to carry commands and session control For FTP username/password authentication, the operations evidence requires another function than FTP control connection.
Question 16
A transfer protocol must use connection-oriented transport with TCP reliability rather than a lightweight UDP exchange. Which option should the engineer use or identify? Choose ONE.
- FTP reliable TCP transport
- Separate FTP control and data connections
- TFTP without built-in user authentication
- FTP username/password authentication
Correct Answer: A
Correct Answer
Answer A is correct because FTP reliable TCP transport provides connection-oriented file transfer with TCP reliability. In a FTP reliable TCP use case, it is appropriate when Use FTP when TCP session behavior is desired and the environment accepts FTP security characteristics. The observed behavior aligns with that role.
Incorrect Answers
Answer B is incorrect because Traditional FTP uses a control connection for commands and a separate connection for file data Separate FTP control misses the FTP reliable TCP decision in this operations scenario. For Separate FTP control, separation from FTP reliable TCP remains material in this operations scenario.
Answer C is incorrect because TFTP provides a very simple read/write file service and does not include built-in username/password authentication For FTP reliable TCP, the operations evidence requires another function than TFTP without built-in. Using TFTP without built-in here would leave the FTP reliable TCP requirement unresolved during this operations task.
Answer D is incorrect because Traditional FTP can authenticate users with credentials before allowing file operations The operations evidence favors FTP reliable TCP; FTP username/password authentication operates at another control point. The FTP reliable TCP result depends on another mechanism, not the FTP username/password authentication behavior described above.
Question 17
A legacy repository supports both common file-transfer protocols, but policy requires a user-authenticated session before a configuration can be downloaded. Which option should the engineer use or identify? Choose ONE.
- show running-config on VTY transport and login settings
- FTP rather than TFTP for authenticated sessions
- TFTP simple configuration or image transfer
- FTP reliable TCP transport
Correct Answer: B
Correct Answer
Answer B is correct because FTP rather than TFTP for authenticated sessions provides user-authenticated file transfer instead of anonymous simple TFTP semantics. In a FTP rather than use case, it is appropriate when Choose FTP when the key requirement is an account-based transfer rather than minimal trusted-LAN simplicity. The observed behavior aligns with that role.
Incorrect Answers
Answer A is incorrect because show running-config on is used when verify whether login local and transport input ssh are actually applied to the remote lines. The operations evidence favors FTP rather than; show running-config on operates at another control point.
Answer C is incorrect because TFTP is commonly used for straightforward network-device file copies and bootstrapping because the protocol is intentionally minimal The operations evidence favors FTP rather than; TFTP simple configuration operates at another control point.
Answer D is incorrect because FTP relies on TCP, which provides connection-oriented delivery and retransmission behavior for the transfer The required FTP rather than outcome differs from the FTP reliable TCP purpose in this operations case.
Question 18
A PXE-style provisioning segment needs a minimal unauthenticated file fetch for a known filename and does not need a persistent TCP session. Which option should the engineer use or identify? Choose ONE.
- TFTP using UDP port 69
- FTP control connection on TCP port 21
- TFTP rather than FTP for minimal boot service
- FTP rather than TFTP for authenticated sessions
Correct Answer: C
Correct Answer
Answer C is correct because TFTP rather than FTP for minimal boot service provides minimal transfer behavior for a tightly controlled provisioning subnet. In a TFTP rather than use case, it is appropriate when Choose TFTP when simplicity and known-file access matter more than authentication or rich file-service features. The observed behavior aligns with that role.
Incorrect Answers
Answer A is incorrect because TFTP using UDP is used when Use it for simple trusted-network transfers where low protocol overhead is more important than rich session features. The required TFTP rather than outcome differs from the TFTP using UDP purpose in this operations case.
Answer B is incorrect because FTP control connection is used when a stateful authenticated file-transfer session with FTP semantics is required. Using FTP control connection would not produce the TFTP rather than behavior shown by this operations evidence.
Answer D is incorrect because FTP rather than is used when Choose FTP when the key requirement is an account-based transfer rather than minimal trusted-LAN simplicity. In the operations case, TFTP rather than differs from FTP rather than behavior.
Question 19
A packet capture shows one FTP connection carrying commands while file contents are carried separately. The engineer must explain the protocol behavior. Which option should the engineer use or identify? Choose ONE.
- TFTP without built-in user authentication
- FTP username/password authentication
- TFTP rather than FTP for minimal boot service
- Separate FTP control and data connections
Correct Answer: D
Correct Answer
Answer D is correct because Separate FTP control and data connections provides recognition that FTP separates command traffic from transferred file data. In a Separate FTP control use case, it is appropriate when Remember the two-channel design when troubleshooting firewalls or packet captures involving FTP. The observed behavior aligns with that role.
Incorrect Answers
Answer A is incorrect because TFTP without built-in is used when Use it only where the surrounding network and server controls provide the necessary trust. Using TFTP without built-in would not produce the Separate FTP control behavior shown by this operations evidence.
Answer B is incorrect because FTP username/password authentication is used when a file server requires account-based access and encryption is not the stated requirement. In the operations case, Separate FTP control differs from FTP username/password authentication behavior.
Answer C is incorrect because TFTP rather than is used when Choose TFTP when simplicity and known-file access matter more than authentication or rich file-service features. TFTP rather than misses the Separate FTP control decision in this operations scenario.
Question 20
SSH access fails after a VTY hardening change. The engineer needs to inspect the configured line authentication method and allowed inbound transport directly in the running configuration. Which option should the engineer use or identify? Choose ONE.
- show running-config on VTY transport and login settings
- TFTP simple configuration or image transfer
- FTP reliable TCP transport
- Separate FTP control and data connections
Correct Answer: A
Correct Answer
Answer A is correct because show running-config on VTY transport and login settings provides direct verification of VTY authentication and transport configuration. In a show running-config on use case, it is appropriate when verify whether login local and transport input ssh are actually applied to the remote lines. The observed behavior aligns with that role.
Incorrect Answers
Answer B is incorrect because TFTP simple configuration is used when controlled networks for simple reads or writes of known files. In the operations case, show running-config on differs from TFTP simple configuration behavior. Operationally, show running-config on needs another behavior than TFTP simple configuration provides in this operations case.
Answer C is incorrect because FTP reliable TCP is used when Use FTP when TCP session behavior is desired and the environment accepts FTP security characteristics. FTP reliable TCP misses the show running-config on decision in this operations scenario.
Answer D is incorrect because Separate FTP control is used when Remember the two-channel design when troubleshooting firewalls or packet captures involving FTP. For show running-config on, the operations evidence requires another function than Separate FTP control.
