ccna 200-301 netacad

ccna 200-301 netacad.Harden the routerEliminate potential abuse against unused ports and services. Secure administrative controls. Ensure that only authorized personnel have access and that their level of access is controlled. Disable unused ports and interfaces. Reduce the number of methods that can access the device. Disable unneeded services. As with many computers, the router enables a number of services by default, some of which are unnecessary andvulnerable to being used by an attacker to gather information or exploit.2.1.1.4 Protecting Administrative AccessManagement access is used for the purpose of managing the router, so securing management access is an extremely important security task. If an unauthorized person gains administrative access to a router, that person will be able to modify the router's parameters, disable routing features, or discover and gain access to other systems in the network.Securing administrative access to the base device includes the following where important tasks. Restrict access to devices-limit the ports that can be accessed, limit the devices that are allowed to communicate, and limit the methods of access. Logging and accounting for all access - For audit purposes, record anyone who accesses the device, including what was done and when.Authenticate access - Ensure that access is authorized only to authenticated users, groups, and services. Limit the number of failed login attempts and the time between logins.Authorization of actions - Limit access actions and views for specific users, groups, and services. Present legal notices - Display legal notices for interactive sessions, and consult with the company's legal counsel to develop legal notices.