SY0-501 · Question #266
Given the log output: Max 15 00:15:23.431 CRT: #SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: msmith] [Source: 10.0.12.45] [localport: 23] at 00:15:23:431 CET Sun Mar 15 2015 Which of the…
The correct answer is B. Disable telnet and enable SSH. The log output indicates an insecure Telnet login on port 23, which transmits credentials and data in plaintext. To protect data security, the network administrator must replace this insecure protocol with a secure alternative.
Question
Given the log output:
Max 15 00:15:23.431 CRT: #SEC_LOGIN-5-LOGIN_SUCCESS:
Login Success [user: msmith] [Source: 10.0.12.45] [localport: 23] at 00:15:23:431 CET Sun Mar 15 2015 Which of the following should the network administrator do to protect data security?
Options
- AConfigure port security for logons
- BDisable telnet and enable SSH
- CConfigure an AAA server
- DDisable password and enable RSA authentication
How the community answered
(32 responses)- A9% (3)
- B81% (26)
- C6% (2)
- D3% (1)
Why each option
The log output indicates an insecure Telnet login on port 23, which transmits credentials and data in plaintext. To protect data security, the network administrator must replace this insecure protocol with a secure alternative.
Configuring port security primarily restricts which MAC addresses can access a network port and does not encrypt the data transmitted over a remote access protocol like Telnet.
The log explicitly shows a login on `localport: 23`, which is the default port for Telnet, an inherently insecure protocol that sends all data, including usernames and passwords, in plaintext. To protect data security, Telnet should be disabled and SSH (Secure Shell) enabled, as SSH encrypts the entire communication session, including authentication credentials and data, preventing eavesdropping and unauthorized access.
While an AAA server centralizes authentication, authorization, and accounting, it does not encrypt the communication channel itself, meaning sensitive information would still be transmitted in plaintext if Telnet were used.
Enabling RSA authentication, often used with SSH for stronger security, is a good practice, but it doesn't address the fundamental vulnerability of Telnet transmitting all data in plaintext; RSA authentication needs to be paired with a secure protocol like SSH.
Concept tested: Securing remote access protocols (Telnet vs. SSH)
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ssh/configuration/xe-16/sec-conn-ssh-xe-16-book/sec-conn-ssh-xe-16-book_chapter_010.html
Topics
Community Discussion
No community discussion yet for this question.