A company has decided to update their usage policy to allow employees to surf the web unrestricted from their work computers. Which of the following actions should the IT security team implement to help protect the network from attack as a result of this new policy?
A. Install host-based anti-malware software B. Implement MAC filtering on all wireless access points C. Add an implicit deny to the core router ACL D. Block port 80 outbound on the company firewall E. Require users to utilize two-factor authentication
Correct Answer: A
Explanation: To protect the computers from employees installing malicious software they download on the internet, antimalware should be run on all systems. After a single machine in a company is compromised and is running malicious software (malware), the attacker can then use that single computer to proceed further into the internal network using the compromised host as a pivot point. The malware may have been implemented by an outside attacker or by an inside disgruntled employee.
You have been tasked with setting up a wireless network in an office. The network will consist of 3 access points and a single switch. The network must meet the following parameters.
The SSIDs need to be configured as corpnet with a key of S3cr3t! The wireless signals should not interfere with each other.
The subnet the Access points and Switch are on should only support 30 devices maximum The access Points should be configured to only support TKIP clients at a maximum speed
Instructions: Click on the devices to review their information and adjust the setting of the APs to meet the given requirements.
Correct Answer:
Exhibit 1 as follows
Access Point Name: AP1
IP Address: 192.168.1.3
Gateway: 192.168.1.2
SSID: corpnet
SSID Broadcast: yes
Mode: G
Channel: 1
Speed: Auto
Duplex: Auto
WPA Passphrase: S3cr3t!
Exhibit 2 as follows
Access Point Name: AP2
IP Address: 192.168.1.4
Gateway: 192.168.1.2
SSID: corpnet
SSID Broadcast: yes
Mode: G
Channel: 6
Speed: Auto
Duplex: Auto
WPA Passphrase: S3cr3t!
Exhibit 3 as follows
Access Point Name: AP3
IP Address: 192.168.1.5
Gateway: 192.168.1.2
SSID: corpnet
SSID Broadcast: yes
Mode: G
Channel: 11
Speed: Auto
Duplex: Auto
WPA Passphrase: S3cr3t!
You are tasked with creating a network that will accomplish the following requirements Requirements:
1) The remote sales team must be able to connect to the corporate network
2) Each department must have ONLY two PCs and a server
3) Each department must be segmented from each other
4) The following VLANs have been designated:
a) VLAN 2- Finance
b) VLAN 12- Sales
c) VLAN 22- Human Resources (HR)
Complete the network by dragging the required objects into the diagram.
INSTRUCTIONS: Objects can be used multiple times and not all placeholders need to be filled
Select and Place:
Wireless network users recently began experiencing speed and performance issues after access point 2 (AP2) was replaced due to faulty hardware. The original network was installed according to a consultant’s specifications and has always worked without a problem.
You a network technician, have been tasked with evaluating the situation and resolving the issues to improve both performance and connectivity. Refer to the following exhibits and perform any necessary changes to the wireless and wired infrastructure by adjusting devices. Note: Adjust the LEAST number of devices needed to fix the issue.
Select and Place:
Correct Answer:
After you fix AP2, you must click on the switch, which will bring up the switch interface. Type in the two commands that they show there, to prove the fix. Do not worry that interface 4 is down, there is no interface 4 for you to do
Your company recently purchased a new building down the street from the existing office. For each of the tasks below, select the appropriate antenna type and encryption object for all wireless access point (AP).
1. Create an encrypted wireless connection between the two buildings that BEST controls signal propagation, while maximizing security.
2. Restrict the wireless signal generated by the access points (AP’s) inside Building 1, so that it minimizes broadcast beyond the building.
3. Maximize wireless coverage inside Building 1.
4. Building 1’s internal wireless network is for visitors only and must not require any special configuration on the visitor’s device to connect.
