ccna 200-301 scope

ccna 200-301 scope.Default settings in some Cisco IOS software exist due to their history. These default settings were logical when the software was originally developed. And other default settings in most systems made sense in the context of the time, but when used on the devices that make up the network's perimeter defenses, they introduce security vulnerabilities. While some default settings are needed from a standards standpoint, they are undesirable from a security standpoint.There are a number of practices that can help achieve device security: Disabling unneeded services and interfaces.Disabling and limiting common configuration management services, such as SNMP.disabling probing and scanning, such as ICMP; securing endpoint access.Disabling free ARP or proxy ARP.Disabling IP directed broadcasts.2.4.1.3 Cisco 10S Security ToolsIn order to protect network devices, administrators must first determine the vulnerabilities that exist in the current configuration. The best way to do this is to use a security audit tool. The security audit tool checks the security level of the configuration by comparing it to the recommended settings and tracking the differences. After finding vulnerabilities, the networker has to modify the configuration to reduce or eliminate these vulnerabilities to protect the network and devices.The following three security auditing tools are available.Security AuditWizard -------------- This is a security audit feature provided by CCP. The Security Audit Wizard provides a list of vulnerabilities and allows the administrator to select the configuration associated with the security vulnerabilities to modify on the router.