Karteikarten
NETWORK SECURITY | MANAGING SECURE NETWORKS | Switch Configuration Security
Karten in diesem Stapel (14)
- 1I N F OMaintain physical switch security.
-------------
An attacker who gains physical access to your switch controls that portion of the network. - 2One of the most important security task surrounding switches is _______________maintaining physical security of device
- 3VLAN Security disables automatic ______ negotiation to prevent VLAN ______ ________.trunk
hopping attack - 4Name 3 common practices to ensure secure implementation of VLANsVLAN Pruning
VLAN trunk negotiation
port security - 5Switches uses ______ _______ to carry VLANs across many switches that make up a network; this allows any switch port on network to join any VLANVLAN trunking
- 6What is a VLAN best practice for network security?implement the least privilege rule and only trunk VLANs to switches if VLAN is needed
- 7What limits the unnecessary exposure of VLANs by limiting the number of switches where they are trunkedVLAN Pruning
- 8Malicious users may attempt what attack to switch from their authorized VLAN to one containing resources; attacker pretends to be a switch and ask the switch to trunk VLANs to their deviceVLAN hopping
- 9denies the use of automatic VLAN trunk negotiation to limit the effectiveness of VLAN hopping attackVLAN trunk negotiation
- 10Limits the devices that connect to network switch port by MAC addressPort Security
- 11protects against attacker disconnecting an authorized device from a wired network and replacing with rogue device that may eavesdropPort security
- 12two modes of port securitystatic mode
dynamic mode (or sticky) - 13Administrators manually configure valid MAC addresses for each portstatic port security
NOTE: this is time consuming but most secure method - 14Switches memorize the first MAC address they see on each port and limit access to that addressdynamic port security
NOTE: this is must faster but risky
Informationen
- Beschreibung
- 1. Firewall Rule Management | 2. Router Configuration Security| 3. Switch Configuration Security | 4. Maintaining Network Availability | 5. Network Monitoring | 6. Simple Network Management Protocol (SNMP) | 7. Storage Networks
- Erstellt von
- Kimberly Stover
- Aufrufe
- 0
- Verlauf
-
- Erstellt von Kimberly Stover · 14 Feb 2017
- Kopiert von Kimberly Stover · 8 Mär 2017
- Kopiert von Kimberly Stover · 20 Apr 2017
- Kopiert von Kimberly Stover · 12 Mai 2017
- Kopiert von Kimberly Stover · 15 Mai 2017
- Bewertung