What can be done to secure the virtual terminal interfaces on a router? (Choose two.)

What can be done to secure the virtual terminal interfaces on a router? (Choose two.)
A . Administratively shut down the interface.
B . Physically secure the interface.
C . Create an access list and apply it to the virtual terminal interfaces with the access-group command.
D . Configure a virtual terminal password and login process.
E . Enter an access list and apply it to the virtual terminal interfaces using the access-class command.

View Answer

Answer: D, E

Explanation:

It is a waste to administratively shut down the interface. Moreover, someone can still access the virtual terminal interfaces via other interfaces -> A is not correct.

We can not physically secure a virtual interface because it is “virtual” -> B is not correct.

To apply an access list to a virtual terminal interface we must use the “access-class” command. The “access-group” command is only used to apply an access list to a physical interface -> C is not correct; E is correct.

The most simple way to secure the virtual terminal interface is to configure a username & password to prevent unauthorized login -> D is correct.