Examkin

Soru

Zorluk: ZorKey Security Concepts, Threats, Vulnerabilities, and Mitigations

An enterprise security audit reveals two critical vulnerabilities in a campus network infrastructure: administrative command entries sent to network switches during remote management sessions are logged in cleartext without granular per-command authorization, and unauthorized rogue devices plugged into active wall jacks in common areas gain immediate access to internal network segments. Which two security mitigations directly resolve these specific vulnerabilities? (Select two.)

  1. Implementing TACACS+ for network device administration to mandate command-by-command authorization and encrypt the full packet payload.Cevap
  2. Configuring Port Security on access switch ports to restrict link connectivity to authorized MAC addresses.Cevap
  3. C
    Deploying RADIUS for device administration because it provides complete packet body encryption for all administrative command authorization requests.
  4. D
    Applying a standard IPv4 ACL on all access switch ports containing explicit permit statements for authorized management subnets.

Cevap

Implementing TACACS+ for network device administration and configuring Port Security on access switch ports directly resolve the administrative cleartext/authorization gap and unauthorized physical access vulnerabilities.
The correct mitigations are implementing TACACS+ for device administration and configuring Port Security on access switch ports. TACACS+ operates over TCP port 49, encrypts the complete packet body, and permits granular authorization of individual administrative CLI commands. Port Security secures Layer 2 physical access ports by permitting only specified MAC addresses, effectively blocking rogue devices plugged into physical wall jacks.

Adım Adım Çözüm

1
Analyze the first identified vulnerability regarding switch administrative command security.
The requirement demands full packet encryption and per-command authorization for network administration.
TACACS+ uses TCP port 49, encrypts the entire packet payload, and allows administrators to control exactly which CLI commands individual users can execute.
2
Analyze the second identified vulnerability regarding rogue physical connections in common areas.
The requirement demands Layer 2 ingress filtering on access ports.
Port Security restricts interface traffic to dynamically learned or statically defined MAC addresses, dropping traffic or shutting down the port when an unauthorized device plugs in.
3
Evaluate why RADIUS and Standard ACLs fail as correct solutions.
RADIUS lacks full payload encryption and per-command authorization, while standard ACLs on access ports trigger implicit deny behavior for non-management host traffic.
Correct mitigations must address the specific root vulnerabilities without causing protocol mismatches or dropping legitimate network traffic.

Anahtar Kavram

AAA Framework Differences and Layer 2 Access Control Mitigations
Bu soruyu puanla

Konular

Key Security Concepts, Threats, Vulnerabilities, and Mitigations

Bu konudan daha fazla soru