350-401 Question 539
Select 3You are tasked with enhancing the security of a branch office's network. The branch router is experiencing unauthorized configuration changes and excessive login attempts. Which of the following measures can you implement on the router to mitigate these issues?
- A
Enable role-based access control (RBAC) for user accounts.
- B
Implement Control Plane Policing (CoPP) to limit management traffic.
- C
Disable logging for failed login attempts to reduce router resource usage.
- D
Configure login block-for to restrict repeated failed login attempts.
- E
Enable SNMPv1 for monitoring and management.
Show answer and explanation
Correct answers: A, B, D
Explanation
To secure the branch router, you should implement measures that control access and protect the router from unauthorized changes or attacks. Enabling RBAC ensures users have only the access they need. CoPP protects the router's control plane from excessive or malicious management traffic. Configuring login block-for helps prevent brute force attacks. Avoiding outdated protocols like SNMPv1 and keeping logging enabled are also critical best practices for maintaining infrastructure security.
- A. Correct.
Enabling RBAC allows you to define roles with specific privileges, reducing the risk of unauthorized configuration changes.
- B. Correct.
Control Plane Policing (CoPP) protects the router's control plane by filtering and rate-limiting management traffic, mitigating DoS attacks and unauthorized access.
- C. Incorrect.
Disabling logging for failed login attempts is not a security best practice, as it removes critical information needed for troubleshooting and auditing.
- D. Correct.
The login block-for command helps mitigate brute force login attempts by temporarily blocking access after a certain number of failed login attempts.
- E. Incorrect.
SNMPv1 is outdated and lacks encryption, making it unsuitable for secure monitoring and management.