A network administrator is securing a newly deployed Layer 3 access switch prior to production deployment. The security policy mandates encrypted remote monitoring, protection against unauthorized network infrastructure footprinting, and secure management protocol usage. Which of the following hardening configurations should the administrator apply to meet these security requirements? (Select TWO.)
- Configure SNMPv3 with authPriv security level to enforce user-based authentication and payload encryption.Answer
- Disable link-layer discovery protocols such as CDP and LLDP on interfaces connected to untrusted user devices.Answer
- CEnable Telnet on virtual terminal (VTY) lines and rely on a standard IPv4 Access Control List for session protection.
- DConfigure SNMPv2c using default community strings to facilitate lightweight network management polling.
- EAssign all active access ports to the unconfigured default native VLAN without applying port security controls.
Answer
The administrator should configure SNMPv3 with authPriv for encrypted monitoring and disable discovery protocols (CDP/LLDP) on untrusted interfaces to reduce infrastructure exposure.
Configuring SNMPv3 authPriv secures network monitoring with cryptographic authentication and encryption. Disabling discovery protocols (CDP/LLDP) on untrusted ports prevents external reconnaissance and unauthorized network topology discovery.
Step-by-Step Solution
Key Concept
Device Hardening & Management Plane Security