Implementing Cisco Service Provider Advanced Solutions (SPCOR2) — Question 17

Management protocols like NETCONF access network elements on well-known ports. Which design practice hardens a network device implementation?

Answer options

• A. Specify the source interface for SSH
• B. Limit access to port 830, well-known clients, and SSH VTY.
• C. Enable CoPP.
• D. Configure ip http secure-server.

Correct answer: A

Explanation

Specifying the source interface for SSH enhances security by ensuring that only traffic from a designated interface can establish a secure connection, preventing unauthorized access. While limiting access to port 830 and enabling CoPP are good practices, they do not directly harden the SSH implementation like specifying the source interface does. Configuring ip http secure-server is unrelated to hardening SSH access.