Following an internal security assessment, a system administrator is tasked with securing the administrative management plane of a core network switch against unauthorized remote access and brute-force authentication attacks. Which of the following hardening practices should the administrator implement on the device? (Select TWO.)
- Configure virtual terminal (VTY) lines to accept SSH connections exclusively while disabling cleartext Telnet access.Cevap
- BReassign the SSH daemon listening port to standard TCP port 23 to obfuscate administrative services from external network probes.
- CDeploy SNMPv2c with read-only community strings on the management interface to secure remote telemetry monitoring.
- DAssign the switch management interface to the default untagged Native VLAN to ensure administrative access across all trunk links.
- Implement local user login lockout thresholds and rate limiting for consecutive failed administrative authentication attempts.Cevap
Cevap
The administrator should restrict VTY lines exclusively to encrypted SSH transport and establish local user account lockout thresholds to limit failed authentication attempts.
Hardening the administrative management plane requires restricting virtual terminal (VTY) access to SSH to guarantee encrypted communication, alongside configuring local account lockout thresholds to block brute-force authentication attacks.
Adım Adım Çözüm
Anahtar Kavram
Device Management Plane Hardening Best Practices