ccna 200-301 lab manual pdf

ccna 200-301 lab manual pdf.1.3.4.2 Mitigating Detection AttacksSniffing attacks can be mitigated in a number of ways.Using strong authentication is the first choice to protect against packet sniffers. Strong authentication is a method of user authentication that cannot be easily bypassed. One-TimePassword (OTP) is a form of strong authentication. OTP uses two-factor authentication, which combines something owned by one party (e.g., a token card) with something known to it (e.g., a PIN). An AutomatedTellerMachine (ATM) is one that uses two-factor authentication.Encryption is also effective for mitigating packet sniffer attacks. If the traffic is encrypted, packet sniffers will be useless because the captured data is unreadable.Anti-sniffer software and hardware tools can determine if a host is handling a traffic load greater than the nominal load it should be carrying by probing the host's response time changes. While this does not completely eliminate threats, it can reduce the number of threats as part of an overall mitigation system.The switched infrastructure is a common model used today, which makes it difficult to capture any data outside of the direct conflict domain (which may contain only one host). A switched infrastructure does not eliminate the threat of packet sniffers, but it can reduce the utility of sniffers to a large extent.20 Chapter 1 Modern Network Security wi 9 OfficePort scanning cannot be mitigated, but the use of IPS and firewalls can limit the information that port scanners can find. If ICMPecho requests and echl responses are turned off on the edge router, ping scanning can be stopped. However, when these services are turned off, network diagnostic data is also lost. Alternatively, port scanning can be performed without using full ping scanning. It just takes longer to scan, because inactive IP addresses are also scanned.1.3.4.3 Mitigating Access AttacksAgain, a variety of techniques are available for mitigating access attacks.