350-201 Question 81
Select 4A cybersecurity analyst has been tasked with strengthening the security posture of a corporate network. The analyst decides to implement network hardening controls. Which of the following actions align with network hardening best practices?
- A
Disable unused network ports across all switches and routers.
- B
Use Telnet for device management to simplify administrative access.
- C
Deploy a network-based intrusion prevention system (IPS).
- D
Ensure all devices use default credentials for easier troubleshooting.
- E
Enable port security on access layer switches to restrict unauthorized devices.
- F
Implement access control lists (ACLs) to restrict traffic based on specific criteria.
Show answer and explanation
Correct answers: A, C, E, F
Explanation
Network hardening involves implementing controls to reduce vulnerabilities within the network infrastructure. Disabling unused ports, deploying an IPS, enabling port security, and using ACLs are all effective measures to enhance security. However, insecure practices such as using Telnet or default credentials should be avoided, as they increase the risk of compromise.
- A. Correct.
Disabling unused network ports reduces the attack surface by preventing unauthorized devices from connecting to the network.
- B. Incorrect.
Using Telnet is not a best practice as it transmits data, including credentials, in plaintext. Secure alternatives like SSH should be used instead.
- C. Correct.
Deploying an intrusion prevention system (IPS) helps detect and block malicious network traffic, enhancing network hardening.
- D. Incorrect.
Using default credentials is a significant security risk, as attackers often exploit default settings to gain unauthorized access.
- E. Correct.
Enabling port security on switches helps limit connections to trusted devices, preventing rogue device access.
- F. Correct.
Access control lists (ACLs) are a vital part of network hardening, allowing fine-grained control over the traffic permitted or denied within the network.