A community college district is retiring cleartext device management. Which change best replaces insecure protocols for civic network device access and file transfer?
Select an answer to reveal the explanation.
Short Explanation
Telnet and friends are like mailing the master key on a postcard. SSH locks the interactive session, and SCP (or similar secure copy) keeps images and configs off the clear. Turn off Telnet and standardize on encrypted management paths.
Full Explanation
Operational hygiene for IOS XE management planes includes disabling Telnet, enforcing SSH for VTY access, and preferring SCP/SFTP over TFTP/FTP for configuration and image transfer. SNMPv2c lacks modern security properties and is not a CLI replacement. HTTP without TLS and cleartext file protocols reintroduce the same exposure the district is trying to eliminate.