Day 10 Quiz - Physical & Network Security

Objective 4.3/Day 10 -

What network hardening technique helps prevent unauthorized access to unused switch ports?

• Router Advertisement (RA) Guard

• Port security

• Dynamic ARP inspection

• Control plane policing

Answer explanation

Port Security is used to control access to switch ports by specifying which devices are allowed to connect to each port. Port security features, such as limiting the number of MAC addresses that can be learned on a port or binding specific MAC addresses to a port, help prevent unauthorized devices from accessing the network through unused or inactive ports.

Objective 4.3/Day 10 -

Which network hardening technique protects against unauthorized access to SNMP data?

• Secure SNMP

• Private VLANs

• Disable unneeded network services

• Dynamic ARP inspection

Answer explanation

Secure Simple Network Management Protocol (SNMP) involves using SNMPv3, which provides enhanced security features such as authentication and encryption. This ensures that SNMP data is protected from unauthorized access and eavesdropping by requiring proper credentials and encrypting the data transmitted over the network.

Objective 4.3/Day 10 -

What method should be employed to prevent rogue devices from advertising themselves as routers?

• Router Advertisement (RA) Guard

• Control plane policing

• Disable unneeded switchports

• Private VLANs

Answer explanation

Router Advertisement (RA) Guard is used to prevent unauthorized or rogue devices from sending Router Advertisement messages in an IPv6 network. By filtering out or blocking these rogue RA messages, RA Guard helps to protect the network from being disrupted by devices pretending to be legitimate routers.

Objective 4.3/Day 10 -

Which technique involves restricting the use of unnecessary network protocols and services to reduce the attack surface?

• Dynamic ARP inspection

• Disable unneeded network services

• Port security

• Private VLANs

Answer explanation

This technique involves turning off or disabling network services and protocols that are not required for the network's operation. By reducing the number of active services, you minimize potential vulnerabilities and reduce the attack surface that could be exploited by attackers.

Objective 4.3/Day 10 -

What network hardening technique involves modifying passwords to ensure they are not easily guessed or cracked?

• Change default VLAN

• Password complexity/length

• Enable DHCP snooping

• Patch and firmware management

Answer explanation

Password complexity/length refers to the practice of setting strong passwords that include a combination of uppercase and lowercase letters, numbers, and special characters, as well as ensuring passwords meet a minimum length requirement. This technique enhances security by making it harder for attackers to guess or crack passwords.

Objective 4.3/Day 10 -

Which network hardening method helps prevent unauthorized access to network resources based on predefined rules?

• Access control list

• Role-based access

• Change default passwords

• Firewall rules

Answer explanation

Access control lists (ACLs) are used to control traffic flow in a network by allowing or denying access to network resources based on predefined rules. By configuring ACLs, administrators can restrict access to specific IP addresses, ports, or protocols, thereby enhancing network security.

Objective 4.3/Day 10 -

What network hardening technique involves regularly updating software and firmware to address known vulnerabilities and security issues?

• Patch and firmware management

• Enable DHCP snooping

• Change default VLAN

• Role-based access

Answer explanation

Patch and firmware management is the process of regularly updating software and firmware on network devices to address known vulnerabilities and security issues. By keeping devices up-to-date with the latest patches and firmware releases, organizations can mitigate the risk of exploitation by cyber threats.

Objective 4.3/Day 10 -

Which network hardening method involves assigning users permissions and privileges based on their roles and responsibilities within the organization?

• Role-based access

• Firewall rules

• Change default passwords

• Password complexity/length

Answer explanation

Role-based access control (RBAC) is a network security technique that restricts access to network resources based on users' roles and responsibilities within the organization. By assigning permissions and privileges to roles rather than individual users, RBAC helps enforce the principle of least privilege and improves overall network security.

Objective 4.3/Day 10 -

In a corporate wireless network, which network hardening technique can be used to restrict access based on the physical location of devices?

• MAC filtering

• Antenna placement

• Geofencing

• Wireless client isolation

Answer explanation

Geofencing is a network hardening technique that allows administrators to define virtual boundaries around physical locations and restrict or allow access to the network based on the geographic location of devices.

Objective 4.3/Day 10 -

Which network hardening method involves configuring access points to broadcast at specific signal strengths to limit coverage to desired areas?

• Power levels

• Wireless client isolation

• EAP

• Captive portal

Answer explanation

Power levels refer to the transmit power settings of wireless access points. By adjusting power levels, administrators can control the coverage area of access points and limit the range of the wireless network, thereby enhancing security.