100-150 exam dumps

100-150 practice question 273 of 295

Cisco Certified Support Technician (CCST) Networking. Associate level, Cisco. Free question with the correct answer and a full explanation.

100-150 Question 273

Select 4

A network administrator has been tasked with ensuring foundational security for a company's network. Which of the following measures align with foundational security concepts?

  1. A

    Implementing access control lists to restrict unauthorized traffic

  2. B

    Using encryption protocols like TLS to protect data in transit

  3. C

    Disabling unused ports and services on network devices

  4. D

    Allowing all traffic through the firewall to ensure availability

  5. E

    Regularly updating firmware and applying security patches

Show answer and explanation

Correct answers: A, B, C, E

Explanation

Foundational security concepts emphasize implementing proactive measures like access control, encryption, reducing the attack surface, and maintaining up-to-date software to protect the network. Allowing unrestricted traffic is a security risk and contradicts these principles.

  • A. Correct.

    Access control lists (ACLs) are a fundamental security measure used to restrict unauthorized traffic and enhance network security.

  • B. Correct.

    Encryption protocols like TLS are critical for protecting sensitive data in transit and ensuring confidentiality.

  • C. Correct.

    Disabling unused ports and services reduces the attack surface, which is a foundational security practice.

  • D. Incorrect.

    Allowing all traffic through the firewall violates the principle of least privilege and exposes the network to threats, making it incorrect.

  • E. Correct.

    Regular firmware updates and applying security patches address known vulnerabilities and keep the network secure.

Timed practice exam

Take a 100-150 practice test under exam conditions

75 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam