Academic Integrity: tutoring, explanations, and feedback — we don’t complete graded work or submit on a student’s behalf.

An information security manager is concerned that connectivity used to configure

ID: 3750434 • Letter: A

Question

An information security manager is concerned that connectivity used to configure and troubleshoot critical network devices could be attacked The manager has tasked a network security engineer with meeting the following requirements Encrypt all traffic between the network engineer and critic al devices -Segregate the different networking planes as much as possible Do not let access ports impact configuration tasks Which of the following would be the BEST recommendation for the network security engineer o present? Deploy control plane protections Use SSH over out-of-band management Force only TACACS to be allowed Require the use of certificates for AAA . O D

Explanation / Answer

An information security manager is concerned that connectivity used to configure and troubleshoot critical network devices could be attacked The manager has tasked a network security engineer with meeting the following requirements

Force only TACACS to be allowed, these are effecient in Encrypts the entire payload.

TACACS are effecient in Segregate the different networking planes.

Option c