100-160 Question 53
Select 2An organization has recently experienced unauthorized access to its internal network. During the investigation, the cybersecurity team discovered that the attacker exploited weak passwords on several devices. Which of the following basic network security measures should the organization implement to prevent such attacks in the future?
- A
Enforce strong password policies and regular password changes.
- B
Disable unused network ports and services.
- C
Implement a firewall to monitor and control incoming and outgoing network traffic.
- D
Use VPNs for secure remote access to the internal network.
- E
Enable multi-factor authentication (MFA) for critical systems.
Show answer and explanation
Correct answers: A, E
Explanation
The organization should enforce strong password policies and enable multi-factor authentication (MFA) to address the specific issue of weak passwords being exploited. These measures significantly enhance the security of user accounts and devices, making them harder to compromise.
- A. Correct.
Enforcing strong password policies and regular password changes is a fundamental network security measure to prevent attackers from exploiting weak passwords.
- B. Incorrect.
While disabling unused network ports and services is a good practice to minimize the attack surface, it does not directly address the issue of weak passwords.
- C. Incorrect.
Firewalls are essential for monitoring and controlling network traffic, but they do not mitigate the risk posed by weak passwords.
- D. Incorrect.
Using VPNs improves the security of remote access but does not address the issue of weak passwords on internal devices.
- E. Correct.
Enabling multi-factor authentication (MFA) adds an additional layer of security by requiring more than just a password for authentication, significantly reducing the risk of unauthorized access.