ccna 200-301 new

ccna 200-301 new.2.1.2 Configuring secure administrative access2.1.2.1 Protecting PasswordsAttackers can discover administrative passwords using a variety of different methods. They can use a user's personal information to guess passwords, or sniff TFTP packets containing plaintext configuration files. Attackers can also use legitimate network management software such as password auditing tools, such as LOphtCrack or Cain&Able, to discover passwords.Administrators should ensure that strong passwords are used on the network. To protect assets such as your routers and switches, when choosing strong passwords you shouldfollow some common principles. These principles reduce the chances of obtaining passwords through smart guessing and password cracking tools. Use passwords larger than 10 characters, the longer the better. Make passwords complex, including uppercase letters, lowercase letters, numbers, symbols, and spaces. Avoid reusing dictionary words, letter or number sequences, usernames, related pet names, and information about yourself, such as birthdate, ID number, ancestor name, or other easily identifiable information. Intentionally misspell passwords. For example, Smith =Smyth =5mYth or Security =5ecurltyoChanging passwords frequently. If a password is unintentionally compromised by an attacker, changing it frequently can make it difficult for an attacker to exploit it. Do not write the password down and leave it in an obvious place such as on your desk or monitor. In Cisco routers and many other systems, the space before the password is ignored, but the space after the first letter is valid. Therefore, one way to create strongOne way to create strong passwords is to use spaces in the password and create phrases containing many words, which are called password phrases. Password phrases are usually easier to remember than a single word and are also harder to guess because they are longer.2.1.2.2 Protecting Administrative Access