Module 4: Secure Device Access Flashcards
What is the edge router?
The last router between the network and the internet
What are Edge Router security approaches?
a single router, DiD, or a DMZ
What is defence in depth?
This uses multiple layers of security prior to traffic entering the protected LAN.
What is a DMZ?
It enables organizations to provide access to untrusted networks, such as the internet, while keeping private networks secure.
What are the three areas of router security?
Physical, operating system and router hardening
How do you physically secure a router?
Place the router and physical devices that connect to it in a secure locked room that is accessible only to authorized personnel
How do you secure the OS on a router?
configure it with as much memory as possible, and use the latest OS
how do you harden a router?
Ensure that only authorized personnel have access and that their level of access is controlled. Disable unused ports and interfaces and services.
What is the command to command to encrypt all plain text passwords?
service password-encryption
How do you verify passwords are encrypted command?
show running-config
How do you set password minimum length?
security passwords min-length
What is the command to stop brute forcing of a router password?
login block-for 120 attempts 3 within 60
What is a type 5 password?
MD5
What is a type 8 password?
scrypt
What is a type 9 password?
SHA256
