What defensive measures will you take to protect your network from these attacks?

Finding tools to run dictionary and brute forcing attacks against FTP and Web servers is an easy task for hackers. They use tools such as arhontus or brutus to break into remote servers.

CEH# ./rpa
Remote Password Assassin V 1.0
Roses Labs / w00w00
Usage: ./rpa <host> (options)
Options:
-l : Login file to use.
-s : Use the same login.
-c : Password file to use.
-r : Attack FlowPoint Router.
-t : Attack Telnet Port.
-f : Attack FTP Port.
-p : Attack POP Port.

CEH# ./rpa 10.0.0.34 -t -f -c passwords.txt -s linksys

A command such as this, will attack a given 10.0.0.34 FTP and Telnet servers simultaneously with a list of passwords and a single login name: linksys. Many FTP-specific password-guessing tools are also available from major security sites.

What defensive measures will you take to protect your network from these attacks?

A.
Never leave a default password

B.
Never use a password related to your hobbies, pets, relatives, or date of birth.

C.
Never use a password that can be found in a dictionary

D.
Use a word that has more than 21 characters from a dictionary as the password

E.
Never use a password related to the hostname, domain name, or anything else that can be found with whois