Which of the following applies to newer versions of IOS that decrease their attack surface?

The correct answer is C. More services are disabled by default. Recent versions of IOS have less services enabled by default, older versions vary but generally have more services (even those not needed) enabled by default; this increases the attack surface

Enterprise Network Security and Network Services Security

Question

Options

ATelnet cannot be enabled or used
BThe Cisco Discovery Protocol has been removed
CMore services are disabled by default
DTwo-factor authentication is default required

How the community answered

(66 responses)

A
2% (1)
B
3% (2)
C
89% (59)
D
6% (4)

Explanation

Recent versions of IOS have less services enabled by default, older versions vary but generally have more services (even those not needed) enabled by default; this increases the attack surface

Topics

#IOS hardening#attack surface reduction#router security#default configuration

Community Discussion

No community discussion yet for this question.

Full GCED Practice