100-160 Question 77
Select 3A cybersecurity technician is tasked with securing the network infrastructure of a small business. The infrastructure includes routers, switches, and wireless access points. Which of the following technologies and configurations should the technician prioritize to enhance security?
- A
Enable VLANs to segment network traffic
- B
Disable unused ports on switches
- C
Use SNMP (Simple Network Management Protocol) v1 for device management
- D
Implement WPA3 encryption for wireless networks
- E
Configure port mirroring for all switch ports by default
Show answer and explanation
Correct answers: A, B, D
Explanation
Securing network infrastructure requires implementing industry-standard practices such as VLANs for segmentation, disabling unused ports to minimize the attack surface, and using strong encryption like WPA3 for wireless networks. These measures collectively reduce vulnerabilities and enhance the security posture of the network. However, outdated protocols like SNMP v1 should be avoided, and tools like port mirroring should be used selectively and with caution.
- A. Correct.
Enabling VLANs allows for logical segmentation of the network, which limits the spread of threats and isolates sensitive data traffic. This is a critical security measure.
- B. Correct.
Disabling unused ports on switches prevents unauthorized access and reduces the attack surface of the network infrastructure.
- C. Incorrect.
SNMP v1 is outdated and insecure as it transmits data, including credentials, in plaintext. Using SNMP v3 would be a better alternative for secure device management.
- D. Correct.
Implementing WPA3 encryption ensures that wireless network communications are protected with the latest and most secure encryption standards.
- E. Incorrect.
Configuring port mirroring for all switch ports by default is not a security best practice. Port mirroring is typically used for monitoring and troubleshooting, and enabling it for all ports could expose sensitive data to unauthorized monitoring.