A company is moving to a new building designed with a guest waiting area that has existing network ports. Which of the following practices would BEST secure the network?
A.
Ensure all guests sign an NDA.
B.
Disable unneeded switchports in the area.
C.
Lower the radio strength to reduce Wi-Fi coverage in the waiting area.
D.
Enable MAC filtering to block unknown hardware addresses.
B and then ideally D as well. Disabled all unused ports and put them in a seperate VLAN, then use MAC filtering on the enabled ports specifying what hardware can communicate to which devices eg WAP to L3 switch
It's really not, they're asking you "how to prevent guests from plugging into the LAN ports and gain access to the corporate network?"
Of course, if there wasn't a guest area, it wouldn't be as much of a problem.
I was thinking that it would be port B because you can fully prevent with switch ports while you cannot with mac filtering as you have to do that manually 1 by 1
This question sucks. Here's my thinking (and I may be wrong, still learning)
Switchports are the ports on a switch (duh) but why would the switches be accessible to guests in a waiting room?
Is a RJ-45 receptacle on a wall still considered a switchport? I guess it could be, since the wiring would likely lead back to a switch in the networking closet. Which in that case I guess B makes sense. I went for answer D though.
B. my take for everyone who are confused. The guest waiting are doesn't need ports for employees to plug into. Guests don't have a reason to plug in their devices either.
The best practice to secure the network in the guest waiting area would be to disable unneeded switch ports in the area. Switch ports are the ports on a network switch that are used to connect devices to the network. By disabling unneeded switchports, you can prevent unauthorized devices from being connected to the network. This is more effective than enabling MAC filtering, which only blocks devices with unknown hardware addresses and may not fully protect the network. Signing NDAs or lowering the radio strength may not effectively secure the network. NDAs do not harden the network, and lowering the radio strength may cause attenuation issues for guests
B. Disable unneeded switchports in the area.
Disabling the unneeded switchports in the area would prevent unauthorized access to the network. This can help ensure that only authorized personnel have access to the network and improve overall network security.
B is the correct answer. Disabling unneeded switchports will disable unused switchports ENTIRELY, making unauthorized switchport connections impossible in the first place.
A is incorrect because it has nothing to do with the question in hand. You are not going to share corporate data with guests in a waiting area, and furthermore, NDAs do not harden the network.
C is incorrect because it is not the best option. Sure, you can limit the range of the WAP antenna's signal to stop outsiders from connecting to the wireless network, but that would cause attenuation issues for guests unless you know what you are doing.
D is incorrect because that is security through obscurity. Anyone with security knowledge can easily spoof MAC addresses nowadays, so whitelisting MAC addresses is not a great idea in a guest waiting room.
To secure the network in the guest waiting area, the best practice would be to disable unneeded switchports in the area. Switchports are the ports on a network switch that are used to connect devices to the network. By disabling unneeded switchports, you can prevent unauthorized devices from being connected to the network. This is more effective than enabling MAC filtering, which only blocks devices with unknown hardware addresses and may not fully protect the network. Signing NDAs or lowering the radio strength may not be effective in securing the network.
should be B, they want to secure it in the guest room, where guests might be expected to use the naked ports.
disabling them means they are not functional.
The question involves a guest waiting area, you would not enable MAC filtering for a guest waiting room. Disabling switchports maybe not the best option, but would be the best option provided.
why would guests unplug staff laptops and plug their devices in?
they are guests, not criminals.
its like putting out of order sign on the toilet in KFC.
This section is not available anymore. Please use the main Exam Page.N10-008 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Dogster
Highly Voted 1 year, 11 months agoBigDazza_111
Most Recent 11 months, 3 weeks agomaggie22
1 year, 5 months agoETQ
6 months, 3 weeks agoquestionreaper
1 year, 7 months agoRudeYew
2 years ago1stAid
2 years agorabarbar1
2 years agoStellarSteve
2 years, 1 month ago[Removed]
2 years, 1 month agoJakeCharles
2 years, 4 months agofouserd
2 years, 5 months agoRongupta
2 years, 5 months agoalwaysrollin247
2 years, 6 months agoAaronS1990
2 years, 7 months agoryanzou
2 years, 7 months agoMay2022
2 years, 7 months agoAl007
2 years, 7 months agoRongupta
2 years, 5 months agovitasaia
2 years, 3 months agoJakub2023
2 years, 1 month ago