Question 120
At the Goldport energy utility, an engineer enables unmanaged plaintext remote access for convenient switch configuration. Which ongoing control best prevents this issue from recurring?
Explanation
Correct Answer
The needed prevention is to audit management protocols and trusted access sources during upgrades. It directly sustains the original change to enable the supported SSH-based management path with approved user roles and restrict insecure remote protocols. This result addresses the stated challenge at the Goldport energy utility.
Incorrect Answers
unsaved live changes may be lost on restart even if forwarding initially works. The offered alternative applies that mechanism: Add configuration persistence verification to change closure. The reported facts point to a different controlling condition: unencrypted or broadly reachable management exposes network configuration and credentials, the required evidence must show that an authorized SSH login succeeds while an unauthorized plaintext management attempt fails. The alternative does not directly settle the required recurrence control.
The option states: Validate trunk tagging assumptions during interface changes. The source describes its associated mechanism as: different untagged VLAN handling can leak or misdeliver management and user frames. By contrast, the current situation is governed by: unencrypted or broadly reachable management exposes network configuration and credentials, the required evidence must show that an authorized SSH login succeeds while an unauthorized plaintext management attempt fails. Choosing this alternative would leave the question’s specific recurrence control unresolved.
Review rate thresholds against measured normal guest demand. This option is based on the following distinct technical behavior: bursting guest traffic can consume resources needed for contracted business services. The present question instead depends on this mechanism: unencrypted or broadly reachable management exposes network configuration and credentials, the required evidence must show that an authorized SSH login succeeds while an unauthorized plaintext management attempt fails. That difference matters for the requested recurrence control.