County network admins still share a jump-host password over cleartext chat to reach core routers. Which change best implements secure remote administrative access?
Select an answer to reveal the explanation.
Short Explanation
Think of the jump host like the locked front desk for the network closet—handing one shared password around in plain chat is like taping the master key to the break-room fridge. Give each admin their own MFA login through a hardened bastion or privileged gateway, and record the session. Shared cleartext secrets and silent jump hosts are the opposite of secure remote admin.
Full Explanation
Secure remote administrative access requires unique, strongly authenticated sessions into a controlled jump path rather than shared cleartext credentials. A hardened bastion or privileged access gateway with multifactor authentication and session recording supports accountability and least privilege for device administration. Shared passwords defeat nonrepudiation, and moving the same secret into another informal channel does not remediate exposure. Disabling logging removes the evidence needed for investigation and continuous monitoring of privileged remote access.