To harden all exterior-facing network components | |
To educate employees to be on the lookout for suspicious behavior | |
To find a balance between the need to open networks to support evolving business requirements and the need to inform | |
To install firewalls at all critical points in the network |
The running Cisco IOS image is encrypted and then automatically backed up to the NVRAM. | |
The Cisco IOS image file is not visible in the output from the show flash command. | |
When the router boots up, the Cisco IOS image is loaded from a secured FTP location. | |
The running Cisco IOS image is encrypted and then automatically backed up to a TFTP server. | |
The show version command does not show the Cisco IOS image file location. |
Apply the ACL to the interface prior to configuring access control entries to ensure that controls are applied immediately upon configuration. | |
Only one ACL per protocol, per direction, and per interface is allowed. | |
ACLs filter all traffic through and sourced from the router. | |
An "implicit deny" is applied to the start of the ACL entry by default. |