300-430 Question 306
Select 3An organization is deploying a Cisco wireless network to support enterprise-level operations. As part of the device hardening process, you must ensure that the wireless controllers and access points are configured securely to minimize vulnerabilities. Which two actions should you take to harden the devices against unauthorized access and attacks?
- A
Disable unused services and ports on the wireless controllers and access points.
- B
Enable HTTP for web-based management instead of HTTPS to minimize computational overhead.
- C
Implement Role-Based Access Control (RBAC) for administrative access.
- D
Use default SNMP community strings for easy device monitoring.
- E
Regularly update the firmware and patch vulnerabilities on wireless controllers and access points.
Show answer and explanation
Correct answers: A, C, E
Explanation
Device hardening involves implementing security best practices to reduce vulnerabilities. Disabling unused services and ports, implementing RBAC, and regularly updating firmware are critical actions to secure Cisco wireless devices. These measures help prevent unauthorized access, mitigate potential attacks, and ensure that devices operate securely in a dynamic threat environment. Conversely, enabling HTTP or using default SNMP credentials introduces significant security risks and should be avoided.
- A. Correct.
Disabling unused services and ports reduces the attack surface of the devices and minimizes potential entry points for attackers. This is a best practice for device hardening.
- B. Incorrect.
Enabling HTTP instead of HTTPS is not recommended as it transmits data in plaintext, exposing sensitive information such as login credentials to potential interception.
- C. Correct.
Implementing Role-Based Access Control (RBAC) ensures that only authorized users have access to specific functions based on their roles, which enhances security.
- D. Incorrect.
Using default SNMP community strings is a security risk, as these are widely known and can be exploited by attackers to gain unauthorized access to the device.
- E. Correct.
Regularly updating the firmware and patching vulnerabilities ensures that the devices are protected against known exploits and security issues, which is essential for maintaining a secure environment.