cisco certification requirements

cisco certification requirements.OTP and tokens Passwords are generated by external entities (both hardware and software systems) that are synchronized with internal resources. The entity itself is usually protected by a password generated by the user Users do not have to remember difficult passwords To deploy more complex infrastructures, tokens are generated using hardware and software, thus increasing OTP and deployment costsHuman Assigned PasswordsHuman assigned passwords are an easy way to create passwords, but they are also higher risk from a security perspective. People prefer simple passwords, like to use the same passwords over and over again, and in some cases reveal them to others. Only a strongprovisions in the password system are enforced, the risk can only be reduced.System-generated passwordsSystem-generated passwords are stronger than human-assigned passwords in terms of strength, because the system generates passwords with strict enforcement of the password system. In most cases, the system can be used to create passwords using a random password generator, which not only ensures higher ensureshigherentropy, but is also more difficult to crack. Passwords generated by this method are generally impossible to remember, which is a major disadvantage of this method. Users also tend to prefer to write down their passwords on something, which defeats the purpose of having a secure password in the first place.One-time passwords are randomly generated passwords that can only be used once. Implementing one-time password authentication through a token device is a common method of generating one-time passwords. The token device can be either a hardware device or implemented with software (soft token), which is basically a one-time password generator. Most banks use token technology for their internet banking authentication systems.The token device can operate in either synchronous or asynchronous mode. In most cases, the token generator is protected by a password or PIN. In the synchronous token authentication mode, the token generator is synchronized with the authenticator server (e.g., by time synchronization). When a user performs authentication, a one-time password is generated with the token, and the system authenticates the user by verifying that password. In asynchronous token authentication mode, the authentication device generates a query. The user enters this query in the token generator and the token generator will use such information to generate the one-time password.2. Storing and transmitting passwordsPassword management should include developing systems and controls to securely store passwords and securely transmit them when in use. Encrypting files containing passwords, storing only the hash of the password rather than the password itself, and implementing strict access controls on the system where the password is stored can all play a key role in the secure storage of passwords. In addition, all external devices that store passwords, for example, removable hard disk drives used to store passwords, or even any documents in which passwords are recorded, should be properly protected.