4.3 Given a scenario, apply network security features, defense techniques, and solutions.

Question 1

How would you harden a device?

Answer 1

1. Disable unused ports and services
   - Use firewall to control access to ports (NGFW)
2. Change default passwords

Question 2

What is NAC?

Answer 2

• Network Access Control

Question 3

What is port security?

Answer 3

• Will alert you or disable port if a new system is plugged into the network (based on your MAC Addresses).

Question 4

What is 802.1X?

Answer 4

• This is the standard that authenticates users and devices trying to connect to a network, whether it’s wired or wireless (Network Access Control).

Question 5

What is MAC filtering?

Answer 5

• Limit access through the physical hardware (additional administration with visitors or guests)
• One disadvantage is that it is easy to find working MAC addresses through wireless LAN.

Question 6

What is key management?

Answer 6

• Many different keys that need to be managed over many different services.
• You should manage all keys from a centralized manager.
• All key management should be done from one console.

Question 7

What is an ACL?

Answer 7

• Access Control List
• A list of traffic that is allowed or disallowed based off of different groupings of categories (source IP, destination IP, port number, time of day, application, etc.)

Question 8

What is a URL filtering?

Answer 8

• Allow or restrict traffic based on URL
• Can be managed by category as well: auction, hacking, Malware, Travel, Recreation, etc.

Question 9

What is content filtering?

Answer 9

• Control traffic based on data within the content (i.e. URL filtering)
• Corporate control of outbound and inbound data
• Control of inappropriate content (NSFW)

Question 10

What is a security zone?

Answer 10

• More flexible (and secure) than an IP address range; allows more generalized grouping of what part of the network or other network groups you can communicate with.
• Examples: Trusted/Untrusted (or) Internal/External (or) secure/unsecured

Question 11

What is a screened subnet?

Answer 11

• An additional layer of security between you and the Internet
• Public access to public resources while the private data remains inaccessible.