A network administrator is conducting a security baseline review for an enterprise network to distinguish key security concepts and apply suitable mitigation strategies. Which two statements accurately describe key security principles or valid mitigation practices? (Select two.)
- A vulnerability represents a weakness or flaw in system design, implementation, or configuration that could be exploited by a threat actor.Answer
- Implementing 802.1X Port-Based Network Access Control mitigates unauthorized network connectivity by authenticating endpoints before granting switch port access.Answer
- CTACACS+ encrypts only the user password field within the packet payload, leaving authorization details unencrypted during AAA communication.
- DEnabling switch port security with sticky MAC address learning dynamically saves learned addresses directly into the startup configuration file.
Answer
The correct statements define a vulnerability as a system flaw or weakness that can be exploited by a threat, and describe 802.1X Port-Based Network Access Control as a valid mitigation that authenticates devices before granting network switch port access.
A vulnerability is defined as an internal weakness or flaw in system design, software, or configuration that can be exploited by a threat actor. 802.1X Network Access Control serves as a robust mitigation mechanism by forcing endpoints to authenticate before granting access to the LAN switch port.
Step-by-Step Solution
Key Concept
Key Security Terminology and Network Access Mitigations