A network administrator needs to verify that downloaded firmware updates have not been corrupted or tampered with in transit, while also ensuring that administrative login sessions to core switches are strictly limited to authorized staff. Which TWO security concepts or mechanisms directly address these requirements? (Select TWO.)
- Validating the cryptographic SHA-256 hash of the firmware file prior to installationAnswer
- Implementing multi-factor authentication (MFA) for administrative user accessAnswer
- CConfiguring unencrypted UDP-based Syslog forwarding for firmware download events
- DAssigning duplicate IP addresses across redundant core switches to balance management traffic
Answer
Validating the cryptographic SHA-256 hash of the firmware file prior to installation, and implementing multi-factor authentication (MFA) for administrative user access.
Verifying file cryptographic hashes guarantees Integrity by confirming that the downloaded firmware matches the published checksum without alteration. Implementing multi-factor authentication enforces Confidentiality and Authentication by verifying identity through multiple factors before permitting access to critical switch interfaces.
Step-by-Step Solution
Key Concept
Integrity and Confidentiality Controls in Network Security