An information security manager is concerned that connectivity used to configure
ID: 3750434 • Letter: A
Question
An information security manager is concerned that connectivity used to configure and troubleshoot critical network devices could be attacked The manager has tasked a network security engineer with meeting the following requirements Encrypt all traffic between the network engineer and critic al devices -Segregate the different networking planes as much as possible Do not let access ports impact configuration tasks Which of the following would be the BEST recommendation for the network security engineer o present? Deploy control plane protections Use SSH over out-of-band management Force only TACACS to be allowed Require the use of certificates for AAA . O DExplanation / Answer
An information security manager is concerned that connectivity used to configure and troubleshoot critical network devices could be attacked The manager has tasked a network security engineer with meeting the following requirements
Force only TACACS to be allowed, these are effecient in Encrypts the entire payload.
TACACS are effecient in Segregate the different networking planes.
Option c