cisco best practice recommendations for securing a network

Which three items are Cisco best-practice recommendations for securing a network?