100-160 Question 70
Select 3An organization is experiencing unauthorized access attempts from external IP addresses. The network administrator decides to implement IP whitelisting and subnet segmentation to address the issue. How do these measures enhance network security?
- A
IP whitelisting ensures that only trusted IP addresses can access the network.
- B
Subnet segmentation isolates sensitive resources, reducing exposure to unauthorized users.
- C
IP whitelisting encrypts all traffic from external IP addresses to ensure secure communication.
- D
Subnet segmentation prevents internal devices from communicating with each other entirely.
- E
Both IP whitelisting and subnet segmentation help reduce the attack surface of the network.
Show answer and explanation
Correct answers: A, B, E
Explanation
Network addresses play a critical role in security by controlling traffic flow and access. IP whitelisting ensures only trusted IPs can connect, reducing the risk of attacks from unknown sources. Subnet segmentation further enhances security by isolating sensitive resources and limiting unauthorized access, thereby reducing the attack surface and improving overall network security.
- A. Correct.
Correct: IP whitelisting allows only approved IP addresses to access network resources, blocking unauthorized attempts.
- B. Correct.
Correct: Subnet segmentation divides the network into smaller sections, limiting access to sensitive resources and improving security.
- C. Incorrect.
Incorrect: IP whitelisting does not encrypt traffic; its purpose is to control which IP addresses are permitted to access the network.
- D. Incorrect.
Incorrect: Subnet segmentation does not completely block communication between internal devices; it controls and limits traffic based on defined rules.
- E. Correct.
Correct: Both measures contribute to reducing the attack surface by limiting access and isolating critical resources.