🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 9 hours remaining!

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

During a security review, you inspect the baseline IOS configuration for two layer-3 switches that will sit in an internet-facing DMZ:

line vty 0 4 login local transport input telnet ssh ip http server snmp-server community public RO

To harden the devices before deployment, which single change should be made first to most effectively protect remote administrative sessions from eavesdropping and credential theft?

  • Configure a remote syslog destination and increase the local logging buffer size.

  • Enable spanning-tree portfast on all access interfaces to speed convergence.

  • Increase the number of vty lines from five to fifteen to handle concurrent administrators.

  • Remove the ip http server command and restrict the vty lines to SSH version 2 only.

ISC2 Systems Security Certified Practitioner (SSCP)
Network and Communication Security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot