A network security engineer is categorizing security threats and mapping them to appropriate defense controls. Match each security incident description on the left with the corresponding primary defense control on the right.
- An attacker sends targeted deceptive communications pretending to be an internal department to trick employees into revealing credentials.Conducting ongoing user security awareness training and anti-phishing simulations.
- An unauthorized wireless access point is silently connected to a corporate switch port to capture radio signals and internal traffic.Deploying Rogue AP containment features and Wireless Intrusion Prevention Systems (WIPS).
- An attacker systematically tests a small set of common passwords across many user accounts to bypass lockout policies.Implementing Multi-Factor Authentication (MFA) and account lockouts after repeated failed attempts.
- An attacker intercepts and modifies cleartext management traffic exchanged between an administrator interface and a switch.Enforcing SSH protocol usage instead of unencrypted Telnet for remote administration.
Answer
Deceptive targeted communications match security awareness training; Rogue AP deployment matches Wireless Intrusion Prevention Systems (WIPS); Password spraying across multiple accounts matches Multi-Factor Authentication (MFA); Eavesdropping on cleartext management traffic matches SSH enforcement.
Each threat scenario maps directly to its optimal mitigation strategy: social engineering requires user awareness training; rogue wireless access points require rogue detection and WIPS; multi-account password spraying requires MFA enforcement; cleartext session eavesdropping requires encrypted communication via SSH.
Step-by-Step Solution
Key Concept
Threat Vectors and Primary Security Mitigation Controls