100-150 Question 274
Select 3A company is implementing network security measures to protect its infrastructure. As a Cisco Certified Support Technician, you are asked to recommend foundational security concepts to address potential threats and vulnerabilities. Which of the following practices align with foundational security concepts?
- A
Implementing a principle of least privilege for user accounts
- B
Ensuring that all data is encrypted, including public information
- C
Using multi-factor authentication (MFA) for all network access
- D
Disabling unused ports and services on network devices
- E
Relying solely on antivirus software for network protection
Show answer and explanation
Correct answers: A, C, D
Explanation
Foundational security concepts focus on minimizing risks and protecting network resources through practices like the principle of least privilege, multi-factor authentication, and reducing the attack surface by disabling unused ports and services. These measures collectively strengthen a network's security posture.
- A. Correct.
The principle of least privilege ensures that users and systems have only the minimum access needed to perform their tasks, reducing the risk of unauthorized access or misuse.
- B. Incorrect.
Encrypting all data, including public information, is not a practical approach. Public information does not require encryption as it is meant to be accessible.
- C. Correct.
Multi-factor authentication (MFA) adds an extra layer of security by requiring multiple methods of verification, making it harder for unauthorized users to gain access.
- D. Correct.
Disabling unused ports and services reduces the attack surface of a network device, helping to prevent unauthorized access and exploitation.
- E. Incorrect.
Antivirus software alone is insufficient for comprehensive network protection. A layered security approach is necessary to address different types of threats.