Topic 15 Practice Test 1 covers SSH, TFTP, and FTP for Cisco Certified Network Associate 200-301 CCNA and maps to objectives 4.8–4.9. For broader exam preparation, review the Cisco CCNA 200-301 Exam Dumps. Every option includes focused technical reasoning explaining both the networking concept and its fit to the scenario.
Question 1
At Fourth Coffee, a newly reset router has neither a meaningful hostname nor an IP domain name configured. Which option best provides the missing identity prerequisites before RSA key generation? Choose ONE.
- Hostname and IP domain name before RSA key generation
- Local username with a secret
- transport input ssh
- VTY lines
Correct Answer: A
Correct Answer
Answer A is correct because Hostname and IP domain name before RSA key generation is the right selection because Cisco IOS SSH setup commonly establishes a hostname and IP domain name so the device has the identity context used when generating RSA keys. For Hostname and IP, the scenario key outcome is the missing identity prerequisites before RSA key generation.
Incorrect Answers
Answer B is incorrect because A local user account stores a username and protected secret that can authenticate management sessions when local login is selected Local username with misses the Hostname and IP decision in this configuration scenario.
Answer C is incorrect because The transport input ssh command restricts VTY inbound transport to SSH instead of allowing insecure Telnet access For Hostname and IP, the configuration evidence requires another function than transport input ssh.
Answer D is incorrect because Virtual terminal lines are the logical lines that receive remote CLI sessions such as SSH and Telnet The configuration evidence favors Hostname and IP; VTY lines operates at another control point.
Question 2
At Wingtip, the VTY lines are configured for SSH but the device still reports that no host keys exist. Which option best provides the cryptographic key material required for the IOS SSH server? Choose ONE.
- login local on VTY lines
- RSA key pair generation
- ip ssh version 2
- show ip ssh
Correct Answer: B
Correct Answer
Answer B is correct because RSA key pair generation is the right selection because The SSH server needs a public/private key pair so it can perform cryptographic key operations for secure sessions. For RSA key pair, the scenario key outcome is the cryptographic key material required for the IOS SSH server.
Incorrect Answers
Answer A is incorrect because The login local command tells VTY lines to authenticate incoming sessions against the local username database For RSA key pair, the configuration evidence requires another function than login local on. For login local on, separation from RSA key pair remains material in this configuration scenario.
Answer C is incorrect because The ip ssh version 2 command forces SSH version 2 rather than permitting an older protocol version The configuration evidence favors RSA key pair; ip ssh version operates at another control point.
Answer D is incorrect because The show ip ssh command displays IOS SSH server status and parameters such as version and timeout information The required RSA key pair outcome differs from the show ip ssh purpose in this configuration case.
Question 3
At Northwind, the branch router has no TACACS or RADIUS service and must authenticate an SSH administrator locally. Which option best provides a device-local credential for a remote administrator? Choose ONE.
- transport input ssh
- VTY lines
- Local username with a secret
- SSH encrypted management session
Correct Answer: C
Correct Answer
Answer C is correct because Local username with a secret is the right selection because A local user account stores a username and protected secret that can authenticate management sessions when local login is selected. For Local username with, the scenario key outcome is a device-local credential for a remote administrator.
Incorrect Answers
Answer A is incorrect because transport input ssh is used when remote CLI management must accept SSH and reject Telnet. The required Local username with outcome differs from the transport input ssh purpose in this configuration case.
Answer B is incorrect because VTY lines is used when Configure authentication and permitted transports under the VTY lines for remote terminal access. Using VTY lines would not produce the Local username with behavior shown by this configuration evidence.
Answer D is incorrect because SSH protects the interactive management session with encryption and server cryptographic keys, unlike clear-text Telnet Using SSH encrypted management would not produce the Local username with behavior shown by this configuration evidence.
Question 4
At Contoso, a username exists but remote sessions are still not being checked against that local account. Which option best provides VTY authentication against the local user database? Choose ONE.
- ip ssh version 2
- show ip ssh
- SCP over SSH
- login local on VTY lines
Correct Answer: D
Correct Answer
Answer D is correct because login local on VTY lines is the right selection because The login local command tells VTY lines to authenticate incoming sessions against the local username database. For login local on, the scenario key outcome is VTY authentication against the local user database.
Incorrect Answers
Answer A is incorrect because ip ssh version is used when the management baseline requires SSHv2. Using ip ssh version would not produce the login local on behavior shown by this configuration evidence. For login local on, choosing ip ssh version would change the control point in this configuration case.
Answer B is incorrect because show ip ssh is used when verify the device-side SSH service configuration. In the configuration case, login local on differs from show ip ssh behavior. The show ip ssh function therefore differs materially from the login local on outcome required here.
Answer C is incorrect because SCP uses SSH as its secure transport to copy files with authentication and encryption In the configuration case, login local on differs from SCP over SSH behavior. The SCP over SSH function therefore differs materially from the login local on outcome required here.
Question 5
At Fabrikam, security policy requires encrypted CLI access and explicitly prohibits Telnet on the VTY lines. Which option best provides an inbound VTY transport policy that permits only SSH? Choose ONE.
- transport input ssh
- VTY lines
- SSH encrypted management session
- Hostname and IP domain name before RSA key generation
Correct Answer: A
Correct Answer
Answer A is correct because transport input ssh is the right selection because The transport input ssh command restricts VTY inbound transport to SSH instead of allowing insecure Telnet access. For transport input ssh, the scenario key outcome is an inbound VTY transport policy that permits only SSH.
Incorrect Answers
Answer B is incorrect because The purpose of VTY lines is the configuration context that governs remote CLI sessions. VTY lines misses the transport input ssh decision in this configuration scenario. Operationally, transport input ssh needs another behavior than VTY lines provides in this configuration case.
Answer C is incorrect because SSH encrypted management is used when Use SSH for remote CLI administration across networks that should not expose credentials and commands. SSH encrypted management misses the transport input ssh decision in this configuration scenario.
Answer D is incorrect because Cisco IOS SSH setup commonly establishes a hostname and IP domain name so the device has the identity context used when generating RSA keys Hostname and IP misses the transport input ssh decision in this configuration scenario.
Question 6
At Tailspin, a compliance check flags a router because it must not negotiate SSH version 1. Which option best provides an IOS setting that restricts the SSH server to version 2? Choose ONE.
- show ip ssh
- ip ssh version 2
- SCP over SSH
- RSA key pair generation
Correct Answer: B
Correct Answer
Answer B is correct because ip ssh version 2 is the right selection because The ip ssh version 2 command forces SSH version 2 rather than permitting an older protocol version. For ip ssh version, the scenario key outcome is an IOS setting that restricts the SSH server to version 2.
Incorrect Answers
Answer A is incorrect because The purpose of show ip ssh is verification of SSH server status and negotiated configuration settings. For ip ssh version, the configuration evidence requires another function than show ip ssh. For show ip ssh, separation from ip ssh version remains material in this configuration scenario.
Answer C is incorrect because SCP over SSH is used when Use SCP when file transfer confidentiality matters and SSH is already enabled. For ip ssh version, the configuration evidence requires another function than SCP over SSH.
Answer D is incorrect because The SSH server needs a public/private key pair so it can perform cryptographic key operations for secure sessions For ip ssh version, the configuration evidence requires another function than RSA key pair.
Question 7
At Woodgrove, an engineer must apply remote-login authentication and transport restrictions without changing the console line. Which option best provides the configuration context that governs remote CLI sessions? Choose ONE.
- SSH encrypted management session
- Hostname and IP domain name before RSA key generation
- VTY lines
- Local username with a secret
Correct Answer: C
Correct Answer
Answer C is correct because VTY lines is the right selection because Virtual terminal lines are the logical lines that receive remote CLI sessions such as SSH and Telnet. For VTY lines, the scenario key outcome is the configuration context that governs remote CLI sessions.
Incorrect Answers
Answer A is incorrect because The purpose of SSH encrypted management is encrypted remote CLI management rather than clear-text terminal access. The configuration evidence favors VTY lines; SSH encrypted management operates at another control point. Using SSH encrypted management here would leave the VTY lines requirement unresolved during this configuration task.
Answer B is incorrect because Hostname and IP is used when Use these identity settings as prerequisites in the standard SSH server setup workflow. The configuration evidence favors VTY lines; Hostname and IP operates at another control point.
Answer D is incorrect because Local username with is used when Use a local account when the device should authenticate SSH users from its own configuration. The required VTY lines outcome differs from the Local username with purpose in this configuration case.
Question 8
At Adventure Works, after enabling SSH, the administrator wants to confirm the server version and operational parameters. Which option best provides verification of SSH server status and negotiated configuration settings? Choose ONE.
- SCP over SSH
- RSA key pair generation
- login local on VTY lines
- show ip ssh
Correct Answer: D
Correct Answer
Answer D is correct because show ip ssh is the right selection because The show ip ssh command displays IOS SSH server status and parameters such as version and timeout information. For show ip ssh, the scenario key outcome is verification of SSH server status and negotiated configuration settings.
Incorrect Answers
Answer A is incorrect because The purpose of SCP over SSH is a secure authenticated file copy that rides on SSH. The required show ip ssh outcome differs from the SCP over SSH purpose in this configuration case.
Answer B is incorrect because RSA key pair is used when Generate RSA keys after the device identity prerequisites are in place. The required show ip ssh outcome differs from the RSA key pair purpose in this configuration case.
Answer C is incorrect because login local on is used when locally configured usernames and secrets should control VTY access. Using login local on would not produce the show ip ssh behavior shown by this configuration evidence.
Question 9
At Litware, administrators will manage routers across a shared WAN and credentials must not traverse it in clear text. Which option best provides encrypted remote CLI management rather than clear-text terminal access? Choose ONE.
- SSH encrypted management session
- Hostname and IP domain name before RSA key generation
- Local username with a secret
- transport input ssh
Correct Answer: A
Correct Answer
Answer A is correct because SSH encrypted management session is the right selection because SSH protects the interactive management session with encryption and server cryptographic keys, unlike clear-text Telnet. For SSH encrypted management, the scenario key outcome is encrypted remote CLI management rather than clear-text terminal access.
Incorrect Answers
Answer B is incorrect because The purpose of Hostname and IP is the missing identity prerequisites before RSA key generation. Using Hostname and IP would not produce the SSH encrypted management behavior shown by this configuration evidence.
Answer C is incorrect because The purpose of Local username with is a device-local credential for a remote administrator. In the configuration case, SSH encrypted management differs from Local username with behavior. The Local username with function therefore differs materially from the SSH encrypted management outcome required here.
Answer D is incorrect because The purpose of transport input ssh is an inbound VTY transport policy that permits only SSH. transport input ssh misses the SSH encrypted management decision in this configuration scenario. Operationally, SSH encrypted management needs another behavior than transport input ssh provides in this configuration case.
Question 10
At Proseware, a configuration archive must cross an untrusted network and the transfer itself must be encrypted. Which option best provides a secure authenticated file copy that rides on SSH? Choose ONE.
- RSA key pair generation
- SCP over SSH
- login local on VTY lines
- ip ssh version 2
Correct Answer: B
Correct Answer
Answer B is correct because SCP over SSH is the right selection because SCP uses SSH as its secure transport to copy files with authentication and encryption. For SCP over SSH, the scenario key outcome is a secure authenticated file copy that rides on SSH.
Incorrect Answers
Answer A is incorrect because The purpose of RSA key pair is the cryptographic key material required for the IOS SSH server. In the configuration case, SCP over SSH differs from RSA key pair behavior. The RSA key pair function therefore differs materially from the SCP over SSH outcome required here.
Answer C is incorrect because The purpose of login local on is VTY authentication against the local user database. login local on misses the SCP over SSH decision in this configuration scenario. Operationally, SCP over SSH needs another behavior than login local on provides in this configuration case.
Answer D is incorrect because The purpose of ip ssh version is an IOS setting that restricts the SSH server to version 2. For SCP over SSH, the configuration evidence requires another function than ip ssh version.
Question 11
At Alpine, a lab device needs a simple image pull from a trusted server without establishing a TCP session. Which option best provides the lightweight UDP-based file-transfer service used by many boot and configuration workflows? Choose ONE.
- TFTP simple configuration or image transfer
- FTP username/password authentication
- TFTP using UDP port 69
- FTP rather than TFTP for authenticated sessions
Correct Answer: C
Correct Answer
Answer C is correct because TFTP using UDP port 69 is the right selection because TFTP is a lightweight file-transfer protocol that uses UDP, with requests directed to well-known port 69. For TFTP using UDP, the scenario key outcome is the lightweight UDP-based file-transfer service used by many boot and configuration workflows.
Incorrect Answers
Answer A is incorrect because TFTP is commonly used for straightforward network-device file copies and bootstrapping because the protocol is intentionally minimal Using TFTP simple configuration would not produce the TFTP using UDP behavior shown by this configuration evidence.
Answer B is incorrect because Traditional FTP can authenticate users with credentials before allowing file operations In the configuration case, TFTP using UDP differs from FTP username/password authentication behavior. The FTP username/password authentication function therefore differs materially from the TFTP using UDP outcome required here.
Answer D is incorrect because FTP offers authenticated, session-oriented file transfer, whereas TFTP is intentionally simple and lacks native user authentication FTP rather than misses the TFTP using UDP decision in this configuration scenario. Operationally, TFTP using UDP needs another behavior than FTP rather than provides in this configuration case.
Question 12
At Blue Yonder, a design review rejects a transfer method because the protocol itself provides no user login mechanism. Which option best provides a simple transfer protocol that does not natively authenticate users? Choose ONE.
- FTP control connection on TCP port 21
- FTP reliable TCP transport
- TFTP rather than FTP for minimal boot service
- TFTP without built-in user authentication
Correct Answer: D
Correct Answer
Answer D is correct because TFTP without built-in user authentication is the right selection because TFTP provides a very simple read/write file service and does not include built-in username/password authentication. For TFTP without built-in, the scenario key outcome is a simple transfer protocol that does not natively authenticate users.
Incorrect Answers
Answer A is incorrect because FTP uses a TCP control connection, normally to server port 21, to carry commands and session control In the configuration case, TFTP without built-in differs from FTP control connection behavior. The FTP control connection function therefore differs materially from the TFTP without built-in outcome required here.
Answer B is incorrect because FTP relies on TCP, which provides connection-oriented delivery and retransmission behavior for the transfer FTP reliable TCP misses the TFTP without built-in decision in this configuration scenario. Operationally, TFTP without built-in needs another behavior than FTP reliable TCP provides in this configuration case.
Answer C is incorrect because TFTP has a small protocol footprint and is widely used for simple boot or configuration transfers on controlled networks For TFTP without built-in, the configuration evidence requires another function than TFTP rather than.
Question 13
At Fourth Coffee, a technician needs to copy one startup configuration from a lab router to a reachable server with minimal setup. Which option best provides a minimal transfer of a known configuration file on a trusted management LAN? Choose ONE.
- TFTP simple configuration or image transfer
- FTP username/password authentication
- FTP rather than TFTP for authenticated sessions
- Separate FTP control and data connections
Correct Answer: A
Correct Answer
Answer A is correct because TFTP simple configuration or image transfer is the right selection because TFTP is commonly used for straightforward network-device file copies and bootstrapping because the protocol is intentionally minimal. For TFTP simple configuration, the scenario key outcome is a minimal transfer of a known configuration file on a trusted management LAN.
Incorrect Answers
Answer B is incorrect because FTP username/password authentication is used when a file server requires account-based access and encryption is not the stated requirement. For TFTP simple configuration, the configuration evidence requires another function than FTP username/password authentication.
Answer C is incorrect because FTP rather than is used when Choose FTP when the key requirement is an account-based transfer rather than minimal trusted-LAN simplicity. The configuration evidence favors TFTP simple configuration; FTP rather than operates at another control point.
Answer D is incorrect because Traditional FTP uses a control connection for commands and a separate connection for file data The configuration evidence favors TFTP simple configuration; Separate FTP control operates at another control point. Using Separate FTP control here would leave the TFTP simple configuration requirement unresolved during this configuration task.
Question 14
At Wingtip, a packet capture must identify the session-control connection of a traditional FTP transfer. Which option best provides the TCP control channel that carries FTP commands and responses? Choose ONE.
- FTP reliable TCP transport
- FTP control connection on TCP port 21
- TFTP rather than FTP for minimal boot service
- show running-config on VTY transport and login settings
Correct Answer: B
Correct Answer
Answer B is correct because FTP control connection on TCP port 21 is the right selection because FTP uses a TCP control connection, normally to server port 21, to carry commands and session control. For FTP control connection, the scenario key outcome is the TCP control channel that carries FTP commands and responses.
Incorrect Answers
Answer A is incorrect because FTP reliable TCP is used when Use FTP when TCP session behavior is desired and the environment accepts FTP security characteristics. The configuration evidence favors FTP control connection; FTP reliable TCP operates at another control point.
Answer C is incorrect because TFTP rather than is used when Choose TFTP when simplicity and known-file access matter more than authentication or rich file-service features. The required FTP control connection outcome differs from the TFTP rather than purpose in this configuration case.
Answer D is incorrect because Reviewing the VTY section of the running configuration reveals the configured authentication method and permitted inbound transports The required FTP control connection outcome differs from the show running-config on purpose in this configuration case.
Question 15
At Northwind, the operations server requires a username and password before network devices can retrieve backup files. Which option best provides an account-authenticated file-transfer session using the FTP protocol? Choose ONE.
- FTP rather than TFTP for authenticated sessions
- Separate FTP control and data connections
- FTP username/password authentication
- TFTP using UDP port 69
Correct Answer: C
Correct Answer
Answer C is correct because FTP username/password authentication is the right selection because Traditional FTP can authenticate users with credentials before allowing file operations. For FTP username/password authentication, the scenario key outcome is an account-authenticated file-transfer session using the FTP protocol.
Incorrect Answers
Answer A is incorrect because The purpose of FTP rather than is user-authenticated file transfer instead of anonymous simple TFTP semantics. Using FTP rather than would not produce the FTP username/password authentication behavior shown by this configuration evidence.
Answer B is incorrect because Separate FTP control is used when Remember the two-channel design when troubleshooting firewalls or packet captures involving FTP. Using Separate FTP control would not produce the FTP username/password authentication behavior shown by this configuration evidence.
Answer D is incorrect because TFTP is a lightweight file-transfer protocol that uses UDP, with requests directed to well-known port 69 Using TFTP using UDP would not produce the FTP username/password authentication behavior shown by this configuration evidence.
Question 16
At Contoso, a transfer must use a TCP-based protocol rather than the UDP-based simplicity of TFTP. Which option best provides connection-oriented file transfer with TCP reliability? Choose ONE.
- TFTP rather than FTP for minimal boot service
- show running-config on VTY transport and login settings
- TFTP without built-in user authentication
- FTP reliable TCP transport
Correct Answer: D
Correct Answer
Answer D is correct because FTP reliable TCP transport is the right selection because FTP relies on TCP, which provides connection-oriented delivery and retransmission behavior for the transfer. For FTP reliable TCP, the scenario key outcome is connection-oriented file transfer with TCP reliability.
Incorrect Answers
Answer A is incorrect because The purpose of TFTP rather than is minimal transfer behavior for a tightly controlled provisioning subnet. In the configuration case, FTP reliable TCP differs from TFTP rather than behavior. The TFTP rather than function therefore differs materially from the FTP reliable TCP outcome required here.
Answer B is incorrect because show running-config on is used when verify whether login local and transport input ssh are actually applied to the remote lines. In the configuration case, FTP reliable TCP differs from show running-config on behavior.
Answer C is incorrect because TFTP provides a very simple read/write file service and does not include built-in username/password authentication In the configuration case, FTP reliable TCP differs from TFTP without built-in behavior. The TFTP without built-in function therefore differs materially from the FTP reliable TCP outcome required here.
Question 17
At Fabrikam, a server team mandates per-user credentials for router file downloads but does not require encryption. Which option best provides user-authenticated file transfer instead of anonymous simple TFTP semantics? Choose ONE.
- FTP rather than TFTP for authenticated sessions
- Separate FTP control and data connections
- TFTP using UDP port 69
- TFTP simple configuration or image transfer
Correct Answer: A
Correct Answer
Answer A is correct because FTP rather than TFTP for authenticated sessions is the right selection because FTP offers authenticated, session-oriented file transfer, whereas TFTP is intentionally simple and lacks native user authentication. For FTP rather than, the scenario key outcome is user-authenticated file transfer instead of anonymous simple TFTP semantics.
Incorrect Answers
Answer B is incorrect because The purpose of Separate FTP control is recognition that FTP separates command traffic from transferred file data. Separate FTP control misses the FTP rather than decision in this configuration scenario. Operationally, FTP rather than needs another behavior than Separate FTP control provides in this configuration case.
Answer C is incorrect because TFTP using UDP is used when Use it for simple trusted-network transfers where low protocol overhead is more important than rich session features. TFTP using UDP misses the FTP rather than decision in this configuration scenario.
Answer D is incorrect because TFTP simple configuration is used when controlled networks for simple reads or writes of known files. For FTP rather than, the configuration evidence requires another function than TFTP simple configuration. For TFTP simple configuration, separation from FTP rather than remains material in this configuration scenario.
Question 18
At Tailspin, diskless lab equipment must fetch a known file from an isolated provisioning server with as little protocol complexity as possible. Which option best provides minimal transfer behavior for a tightly controlled provisioning subnet? Choose ONE.
- show running-config on VTY transport and login settings
- TFTP rather than FTP for minimal boot service
- TFTP without built-in user authentication
- FTP control connection on TCP port 21
Correct Answer: B
Correct Answer
Answer B is correct because TFTP rather than FTP for minimal boot service is the right selection because TFTP has a small protocol footprint and is widely used for simple boot or configuration transfers on controlled networks. For TFTP rather than, the scenario key outcome is minimal transfer behavior for a tightly controlled provisioning subnet.
Incorrect Answers
Answer A is incorrect because The purpose of show running-config on is direct verification of VTY authentication and transport configuration. For TFTP rather than, the configuration evidence requires another function than show running-config on. For show running-config on, separation from TFTP rather than remains material in this configuration scenario.
Answer C is incorrect because TFTP without built-in is used when Use it only where the surrounding network and server controls provide the necessary trust. For TFTP rather than, the configuration evidence requires another function than TFTP without built-in.
Answer D is incorrect because FTP control connection is used when a stateful authenticated file-transfer session with FTP semantics is required. The configuration evidence favors TFTP rather than; FTP control connection operates at another control point.
Question 19
At Woodgrove, a firewall trace shows one TCP flow carrying FTP commands and a different flow carrying the actual file payload. Which option best provides recognition that FTP separates command traffic from transferred file data? Choose ONE.
- TFTP using UDP port 69
- TFTP simple configuration or image transfer
- Separate FTP control and data connections
- FTP username/password authentication
Correct Answer: C
Correct Answer
Answer C is correct because Separate FTP control and data connections is the right selection because Traditional FTP uses a control connection for commands and a separate connection for file data. For Separate FTP control, the scenario key outcome is recognition that FTP separates command traffic from transferred file data.
Incorrect Answers
Answer A is incorrect because The purpose of TFTP using UDP is the lightweight UDP-based file-transfer service used by many boot and configuration workflows. The configuration evidence favors Separate FTP control; TFTP using UDP operates at another control point.
Answer B is incorrect because The purpose of TFTP simple configuration is a minimal transfer of a known configuration file on a trusted management LAN. The required Separate FTP control outcome differs from the TFTP simple configuration purpose in this configuration case.
Answer D is incorrect because The purpose of FTP username/password authentication is an account-authenticated file-transfer session using the FTP protocol. Using FTP username/password authentication would not produce the Separate FTP control behavior shown by this configuration evidence.
Question 20
At Adventure Works, SSH works inconsistently across routers and the auditor needs to compare the exact VTY line settings. Which option best provides direct verification of VTY authentication and transport configuration? Choose ONE.
- TFTP without built-in user authentication
- FTP control connection on TCP port 21
- FTP reliable TCP transport
- show running-config on VTY transport and login settings
Correct Answer: D
Correct Answer
Answer D is correct because show running-config on VTY transport and login settings is the right selection because Reviewing the VTY section of the running configuration reveals the configured authentication method and permitted inbound transports. For show running-config on, the scenario key outcome is direct verification of VTY authentication and transport configuration.
Incorrect Answers
Answer A is incorrect because The purpose of TFTP without built-in is a simple transfer protocol that does not natively authenticate users. The required show running-config on outcome differs from the TFTP without built-in purpose in this configuration case.
Answer B is incorrect because The purpose of FTP control connection is the TCP control channel that carries FTP commands and responses. Using FTP control connection would not produce the show running-config on behavior shown by this configuration evidence.
Answer C is incorrect because The purpose of FTP reliable TCP is connection-oriented file transfer with TCP reliability. In the configuration case, show running-config on differs from FTP reliable TCP behavior. The FTP reliable TCP function therefore differs materially from the show running-config on outcome required here.
