ccna 200-301 study materials

ccna 200-301 study materials.Disable SNMP------CCP can disable SNMP, but does not provide SNMPv3 as CiscoAutoSecure doesconfiguration options, SNMPv3 configurations are not available on all routers. Whichever auto feature is preferred should also only be used as a baseline and modified as required by the enterprise.2.5 SummaryWhen protecting the network, device hardening should be the first step. This includes protecting the network perimeter, protecting managed access to the underlying devices, enhancing the security of virtual logins, and using secure protocols over insecure ones. For example, use SSH instead of Telnet, and HTTPS instead of HTTP.Limiting administrative access is equally important. Administrators should provide access to the infrastructure based on privilege levels, and implement role-based CLI to provide tiered administrative access.10S images and profiles should also be protected using CiscoIOS resilient configuration features. Network monitoring should also be implemented, which includes configuring syslog, SNMP, and NTP.In summary, administrators must be able to identify all devices, interfaces, and managed services that are vulnerable to network attacks. This can be done by performing routine security audits. When deploying a new device in a production environment, the administrator must first use the CCP one-step lockdown feature or the IOSCLI auto secure command.Chapter 3 Authentication, Authorization, and AuditingNetworks must be designed to control who is allowed to connect to the network and what is allowed while connected to the network. These design specifications are defined in the network security policy. The network security policy defines how network administrators, corporate users, remote users, business partners, and customers can access network resources. The network security policy also mandates the implementation of an auditing system that can track who logs into the network, when, and what they do while logged in.Using only a user-mode or privileged-mode plus password approach to managing network access is not sufficient and does not scale well. The use of Authentication, Authorization and Accounting (AAA) protocols provides the necessary framework to enable scalable access security.