350-201 Question 61
Select 3You are tasked with evaluating the security posture of a company’s network environment. During the assessment, you discover that the company has outdated firewall rules, unsecured wireless access points, and an absence of endpoint detection and response (EDR) solutions. After diagnosing these gaps, what recommendations would you make to improve the overall security posture?
- A
Update and optimize the firewall rules to ensure only necessary traffic is permitted.
- B
Implement WPA3 encryption on wireless access points and disable open SSIDs.
- C
Deploy an endpoint detection and response (EDR) solution to monitor and respond to endpoint threats.
- D
Disable the firewall entirely to improve network performance.
- E
Rely solely on antivirus software to protect endpoints instead of deploying EDR.
Show answer and explanation
Correct answers: A, B, C
Explanation
Improving the security posture of the environment requires addressing the identified gaps systematically. Updating firewall rules, securing wireless access points with WPA3, and deploying an EDR solution directly address the vulnerabilities identified in the scenario. Disabling the firewall or relying solely on antivirus software would weaken the security of the network and are not appropriate recommendations.
- A. Correct.
Updating and optimizing firewall rules is a critical step in ensuring only legitimate traffic flows through the network, reducing the attack surface.
- B. Correct.
Implementing WPA3 encryption and disabling open SSIDs significantly enhances wireless network security by preventing unauthorized access.
- C. Correct.
Deploying an EDR solution adds advanced threat detection and response capabilities, helping to identify and mitigate endpoint threats in real time.
- D. Incorrect.
Disabling the firewall would create a significant security gap, exposing the network to numerous threats. This is not a valid recommendation.
- E. Incorrect.
Relying solely on antivirus software is inadequate in modern threat landscapes. EDR solutions provide better visibility and response capabilities for endpoint threats.