An IT administrator discovers that network administrators are remotely connecting to core switches over an unencrypted Telnet connection on TCP port 23, exposing administrative credentials to internal network sniffing. Which of the following is the BEST solution to mitigate this host and network vulnerability?
- Migrate all remote management traffic to Secure Shell (SSH) on TCP port 22.Answer
- BConfigure firewall rules to block incoming ICMP echo requests on the switch management interface.
- CDeploy a web application firewall (WAF) to inspect network switch traffic for malicious HTTP payloads.
- DMaintain the Telnet configuration while trusting the internal corporate network perimeter to prevent interception.
Answer
Migrate all remote management traffic to Secure Shell (SSH) on TCP port 22.
Migrating from cleartext Telnet to SSH ensures all command-line administration and authentication credentials are encrypted in transit, preventing credential harvesting via network sniffing.
Step-by-Step Solution
Key Concept
Replacing insecure cleartext administrative protocols with encrypted protocols like SSH.
Estimated Time:45s