Question 19

Disabling unused ports and changing default passwords are the best device-hardening techniques for network security.

Both disabling unused ports and changing default passwords significantly enhance network security by minimizing potential attack vectors and ensuring that default credentials, which are often widely known and exploited, are not in use.

A) Disabling unused ports

This technique is essential for reducing the number of entry points available to potential attackers. By disabling ports that are not in use, organizations can limit the surface area for attacks, thereby preventing unauthorized access through these channels.

B) Performing regular scanning of unauthorized devices

While scanning for unauthorized devices is a valuable security measure, it is more of a detection technique rather than a hardening technique. It helps identify existing vulnerabilities but does not proactively secure devices as effectively as disabling unused ports does.

C) Monitoring system logs for irregularities

Monitoring system logs is crucial for identifying potential security incidents, but like option B, it serves more as a detection tool rather than a hardening measure. It does not directly contribute to securing devices against breaches.

D) Enabling logical security such as SSO

Enabling single sign-on (SSO) enhances user authentication but does not specifically address device hardening. It focuses on user access management rather than securing the devices themselves.

E) Changing default passwords

Changing default passwords is a fundamental device-hardening technique as it prevents attackers from exploiting known default credentials. This practice is vital for ensuring that devices are not easily compromised by unauthorized users who may have access to default login information.

F) Ensuring least privilege concepts are in place

While implementing least privilege is important for managing user access rights, it does not directly relate to the hardening of devices themselves. This concept primarily addresses user permissions rather than device security.

Conclusion

Ultimately, disabling unused ports and changing default passwords are the most effective device-hardening techniques for enhancing network security. Other options, while important for overall security strategy, do not directly contribute to the hardening of devices in the same proactive manner.