Quiz 19B: Apply Network Hardening Techniques

What is the primary purpose of device hardening in network security?

• To restrict network access at a device level

• To prevent the attachment of unauthorized devices

• To ensure that network hosts are fully patched

• To configure network appliances securely

Which of the following is NOT a recommended practice for password complexity according to NIST's latest guidance?

• Requiring passwords to be at least eight characters long

• Using multiple character classes (mixing letters, case, digits, and symbols)

• Allowing passwords to be less than eight characters

• Avoiding common passwords like "123456" or "password"

What is the purpose of role-based access configuration in network security?

• To restrict network access at a device level

• To configure network appliances securely

• To separate administrative permissions for different tasks

• To prevent the attachment of unauthorized devices

Which security measure helps reduce the attack surface of a network appliance or operating system?

• Enforcing password complexity requirements

• Disabling unneeded network services and protocols

• Implementing MAC filtering on a switch

• Configuring role-based access control

What is the purpose of dynamic ARP inspection (DAI) in network security?

• To prevent unauthorized access to switch ports

• To limit the number of permitted MAC addresses on a port

• To mitigate ARP cache poisoning attacks

Which security feature helps prevent rogue DHCP servers from operating on a network?

• ARP inspection

• MAC filtering

• DHCP snooping

• Dynamic ARP inspection

What does the IEEE 802.1X standard provide for network access control?

• Port-based network authentication

• Dynamic ARP inspection

• VLAN segmentation

• MAC filtering

Which statement about private VLANs (PVLANs) is true?

• PVLANs are used to allow hosts within a VLAN to communicate directly with each other.

• Isolated ports within a PVLAN can communicate only with promiscuous ports.

• PVLANs are typically used to enforce VLAN segmentation policies.

• Community ports within a PVLAN are isolated from each other.

What is the primary function of firewall access control lists (ACLs)?

• To restrict access to specific network resources

• To monitor network traffic for malicious activity

• To prioritize network traffic based on application

• To allow or deny traffic based on specified criteria

Which command is used to view the current status of iptables and the volume of traffic using the chains?

• `iptables -S`

• `iptables -L -v`

• `iptables -A INPUT -s 10.1.0.1 -j ACCEPT`

• `iptables -F`