Management protocols like NETCONF access network elements on well-known ports. Which design practice hardens a network device implementation?

Specifying the source interface for SSH primarily controls the interface the device uses to initiate SSH connections, not to limit inbound management access.

Limiting access to specific ports, such as port 830 for NETCONF over SSH, restricting access to well-known clients (source IP addresses), and securing SSH VTY lines are critical hardening practices. These measures reduce the attack surface, prevent unauthorized access to the device's management interfaces, and ensure only legitimate connections can be established.

CoPP (Control Plane Policing) protects the device's control plane from excessive traffic, but it does not directly limit management access to specific ports or VTY lines.

Configuring `ip http secure-server` enables HTTPS for web-based device management, which encrypts traffic but does not limit access based on specific clients or VTY configurations.