What can be done to secure the virtual terminal interfaces on a router? (Choose two.)

What can be done to secure the virtual terminal interfaces on a router? (Choose two.)
A .  Administratively shut down the interface.
B .  Physically secure the interface.
C .  Create an access list and apply it to the virtual terminal interfaces with the access-group command.
D .  Configure a virtual terminal password and login process.
E .  Enter an access list and apply it to the virtual terminal interfaces using the access-class command.

View Answer

Answer: D,E

Explanation: It is a waste to administratively shut down the interface. Moreover, someone can still

access the virtual terminal interfaces via other interfaces -> A is not correct. We can not physically secure a virtual interface because it is “virtual” -> B is not correct. To apply an access list to a virtual terminal interface we must use the “access-class” command. The “access-group” command is only used to apply an access list to a physical interface -> C is not correct; E is correct. The most simple way to secure the virtual terminal interface is to configure a username & password to prevent unauthorized login -> D is correct.