Which of the following applies to newer versions of IOS that decrease their attack surface?
Suggested Answer: C
Get Premium GCED Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Recent versions of IOS have less services enabled by default, older versions vary but generally have more services (even those not needed) enabled by default; this increases the attack surface on the device.
21 comments · newest first
EL
Elbert
10 months ago
Totally agree with C, more services off means less risk!
LA
Lamonica
11 months ago
B is correct, CDP is gone in newer IOS versions.
LI
Lisbeth
11 months ago
Wait, are we sure about D? Two-factor is not always default.
CO
Cordie
11 months ago
I think C is the most important change.
FR
Francisca
11 months ago
A is definitely true, no more Telnet!
DA
Dahlia
11 months ago
I feel like the Cisco Discovery Protocol being removed was mentioned in a study guide, but I’m not sure if that directly relates to the attack surface reduction.
LY
Lynelle
12 months ago
I practiced a question similar to this where they mentioned two-factor authentication, but I can’t recall if it’s required by default in newer IOS versions.
MA
Marguerita
12 months ago
I think Telnet being disabled is a big deal, but I’m not confident if it’s the only thing that reduces the attack surface.
KE
Kenny
12 months ago
I remember reading that newer IOS versions have more services disabled by default, but I’m not sure if that’s the main point here.
SH
Shalon
1 year ago
Ah, I remember this topic from the lectures. I believe the correct answer is C - newer IOS versions disable more unnecessary services to minimize the attack surface. Sounds like a good security practice.
RI
Rickie
1 year ago
Okay, let me see. I remember learning that Telnet is no longer enabled by default, so that's probably A. But I'm not certain about the other options. I'll have to review my notes.
IZ
Izetta
1 year ago
Hmm, I'm not sure about this one. I know newer IOS versions have security improvements, but I'm not totally clear on the specifics. I'll have to think this through carefully.
EL
Elenore
1 year ago
This question seems straightforward, I think the answer is C - more services are disabled by default in newer IOS versions to reduce the attack surface.
LA
Laticia
1 year ago
The key here is that the plan includes the room and all meals. That makes me think "inclusive plan" is the correct answer. I'm feeling pretty good about that choice.
RO
Ronnie
1 year ago
Hmm, I'm a bit confused by the wording of the question. It's talking about "dashboard tools" and "critical processes" but I'm not sure exactly what it's asking us to identify. I'll need to read through it a few more times to make sure I understand.
PA
Paulina
1 year ago
Implementing an agile approach to avoid using a fixed budget could be an interesting option, but I'm not sure if that's the best fit for this particular project.
BR
Brice
1 year ago
I'm pretty sure this is about competitive bidding - that's where everyone gets a fair shot at the contract, right?
TA
Talia
1 year ago
I'm pretty confident the answer is True. We can definitely rename standard Tabs and Objects in Salesforce, it's a common admin task. I'll mark that as my final answer.
PA
Paola
2 years ago
I agree with Lavelle and Cheryll. Having more services disabled and requiring two-factor authentication would definitely help decrease the attack surface.
CH
Cheryll
2 years ago
I believe it could also be D) Two-factor authentication is default required. It adds an extra layer of security.
LA
Lavelle
2 years ago
I think the answer is C) More services are disabled by default. It makes sense to reduce the attack surface.