Sucuring the Management Plane

Question 1

Securing Passwords

Answer 1

service password-encryption
security passwords min-length
enable algorithm-type md5|sha256|scrypt|secret

Question 2

Securing the Console Line

Answer 2

username * algorithm-type md5|sha256|scrypt|secret
line console 0
login local
exect-timeout
line aux 0
no exec

Question 3

Securing VTY Access with SSH

Answer 3

hostname
username * algorithm-type md5|sha256|scrypt|secret
ip domain name
crytpo key generate rsa general-keys modulus
ip ssh version 2
ip ssh time-out
ip ssh authentication-retries
login block-for * attempts * within 
line vty 0 4
login local
transport input ssh
access-class

Question 4

Securing Configuration and IOS Files

Answer 4

secure boot-image
secure boot-config
show secure bootset

Question 5

Restoring Bootset Files

Answer 5

reload
rommon > dir flash
rommon > boot (bin file)
router# secure boot-config restore flash0: