Examkin

Question

Difficulty: EasyNetwork Device Hardening Best Practices

A network technician is configuring remote administrative access on a newly installed network switch. Which protocol should be enabled to ensure that command-line interface (CLI) sessions and authentication credentials are encrypted across the network?

  1. SSHAnswer
  2. B
    Telnet
  3. C
    HTTP
  4. D
    SNMPv1

Answer

SSH should be enabled because it provides encrypted shell sessions and secure password transmission for device management.
SSH (Secure Shell) operates on TCP port 22 and uses cryptographic methods to encrypt all management traffic, preventing unauthorized eavesdropping and credential theft during remote administration sessions.

Step-by-Step Solution

1
Identify the primary requirement for device hardening
The requirement is to secure remote interactive CLI management access using encryption.
Unencrypted administrative protocols allow attackers to capture login credentials using network sniffing tools.
2
Evaluate protocol security capabilities
SSH provides strong encryption for administrative sessions over TCP port 22.
Replacing legacy cleartext protocols such as Telnet with SSH is a baseline network device hardening best practice.

Key Concept

Management Plane Hardening via Encrypted Protocols
Estimated Time:45s
Rate this question

Topics

Network Device Hardening Best Practices

More questions from this topic