A network engineer is increasing the overall security of network devices and needs to harden the devices. Which of the following will best accomplish this task?
Choose an answer
Tap an option to check your answer.
Correct answer: Replacing Telnet with SSH.
Why this is the answer
Replacing Telnet with SSH best hardens network devices. Telnet transmits data, including credentials, in plaintext, making it vulnerable to eavesdropping and interception. SSH encrypts all communications, providing confidentiality and integrity for administrative sessions. This significantly reduces the risk of unauthorized access or credential compromise. Configuring centralized logging is important for monitoring and incident response but doesn't directly harden the device's access methods. Generating local administrator accounts can be a security risk if not managed properly, as it creates additional attack surfaces. Enabling HTTP administration is generally less secure than HTTPS and offers no encryption, similar to Telnet's vulnerabilities.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed