Lesson 4 of 5
Not started
Network Security
Security concepts, access control and hardening, and common network attacks and their mitigations.
Core concepts: the CIA triad, defense-in-depth, and least privilege. Control access with authentication (802.1X/EAP, RADIUS/TACACS+), network access control (NAC), and segmentation (VLANs, DMZ/screened subnet, zero trust).
Device hardening: change default credentials, disable unused ports/services, use SSH instead of Telnet, apply patches, and configure port security (limit MACs), DHCP snooping, and dynamic ARP inspection. Physical security (locked racks, badge access) protects the infrastructure itself.
Which standard provides port-based network access control at the switch edge?
Which hardening step best protects management traffic to a device?