Subnet Sprint IOS CLI Lab Config Audit Trouble Tickets
Read a running-config the way an attacker would. Tap every line that creates a security problem, choose the best fix, then name the protections that are missing entirely.
Some of the worst problems are lines that aren't there. Check every protection this config lacks.