CompTIA Network+ Network Security Hardening Questions and Answers

Question 1

A network administrator is hardening a switch in a public-facing area.
They want to ensure that only a specific, pre-approved laptop can connect to a particular Ethernet wall jack.
If any other device is plugged in, the port should shut down immediately.
Which switch feature should be configured to achieve this?

Accepted Answer

Port security

Answer

VLAN tagging

Answer

Spanning Tree Protocol (STP)

Answer

DHCP snooping

Question 2

An organization's security policy prohibits the use of insecure remote management protocols. Which of the following protocols should be disabled on network devices and replaced with its secure counterpart?

Accepted Answer

Telnet

Answer

HTTPS

Answer

SNMPv3

Answer

SSH

Question 3

Which of the following is a critical first step when deploying a new router or switch to harden it against unauthorized access?

Accepted Answer

Changing the default administrative credentials

Answer

Enabling jumbo frames

Answer

Configuring an ACL to block all traffic

Answer

Setting the duplex to half

Question 4

A security auditor notes that all switch ports in a company are active, even those in unused offices, and that services like HTTP are enabled on the switch's management interface. Which hardening principle has been primarily violated?

Accepted Answer

Reducing the attack surface

Answer

Defense in depth

Answer

Implementing the principle of least privilege

Answer

Enforcing role-based access control

Question 5

To mitigate the risk of a rogue device on the network impersonating a legitimate DHCP server, which security feature should a network administrator implement on the switches?

Accepted Answer

DHCP Snooping

Answer

Dynamic ARP Inspection (DAI)

Answer

802.1X Port-Based Authentication

Answer

Control Plane Policing (CoPP)

Question 6

A network administrator needs to prevent hosts from the Guest network (192.168.100.0/24) from accessing the company's internal file server at 10.10.50.15. The Guest network must still be able to access the internet. Where is the MOST effective place to apply an Access Control List (ACL) to achieve this goal?

Accepted Answer

Inbound on the router interface connected to the Guest network

Answer

Outbound on the file server's network interface

Answer

Outbound on the router interface connected to the internet

Answer

Inbound on the switch ports connected to the guest hosts