43 Questions
What is the reason for changing the default username and password on a router or access point?
To prevent unauthorized access
Where can one find a list of default credentials for various networking devices?
routerpasswords.com
What type of updates may be included in a firmware update provided by the manufacturer?
Security patches
What is the default username and password for a WRT54G router from Linksys?
admin/admin
Why do small offices or home offices need to change default credentials for network devices?
To prevent security breaches
What is the primary reason for updating the firmware on a router or access point?
To improve device security
What type of security measure involves creating a list that blocks all traffic except for specified destinations?
Allowed list
In a SoHo environment, what type of device typically combines the functions of a router, switch, firewall, and content filter?
All-in-one device
What protocol is commonly used to automatically assign IP addresses on a network?
DHCP
Which type of IP address assignment method might be more reasonable for a small SoHo environment than a large corporate network?
Statically assigned
What is the term used when security relies on keeping the method of protection hidden or obscure?
Security through obscurity
What type of filtering allows you to focus on allowing or disallowing access to specific locations?
Content filtering
What security feature is designed to prevent access to potentially dangerous websites by blocking known bad sites?
Content filtering
Which approach allows everything through the router except for access to specific IP addresses or sites?
'Denial list' approach
In a corporate environment, what is a common reason for implementing content filtering on the network?
'To limit access to sensitive information'
'Security through obscurity' may lead to a false sense of security because:
'Attackers know the security method being used.'
What is the purpose of configuring IP address reservations in DHCP?
To ensure that each device is assigned the same IP address every time it connects
What does WAN stand for in networking terminology?
Wide Area Network
What is the difference between a dynamic and a static WAN IP address?
Dynamic WAN IP addresses change every time the device reboots, while static WAN IP addresses remain constant.
What does UPnP stand for in the context of networking?
Universal Plug and Play
Why is it important to manage WAN IP addresses in large organizations differently from home networks?
Static WAN IP addresses are preferred in large organizations for consistent connectivity.
What is the primary benefit of using DHCP reservations for assigning IP addresses?
It simplifies the process of assigning fixed IP addresses to devices.
Which term refers to configuring a router to always associate a specific static IP address with an internet connection?
Static IP assignment
What is the purpose of having a dynamic WAN IP address for a home router?
To improve network security
What is the function of UPnP when used in combination with routers?
Automatically configuring router settings for specific applications
In networking, what does an IP reservation ensure?
That specific devices are consistently assigned the same IP address
What is the purpose of configuring a guest wireless network on access points?
To provide internet access without allowing access to the internal private network
What is the importance of turning on encryption for a wireless network?
To improve security and prevent unauthorized access
In a corporate environment, what does Network Access Control (NAC) utilize for authentication?
802.1X standard
What is the purpose of port forwarding on a Soho router?
To redirect inbound traffic to specific devices within the network
Which type of devices may benefit from port forwarding on a Soho router according to the text?
Security cameras and servers
What security measure can prevent unauthorized access when connecting a device to an open port in a conference room?
MAC filtering
What would happen if an open port exists in a conference room and someone plugs into it in a corporate environment with NAC enabled?
They are prompted for authentication before gaining access
What method does port forwarding on a Soho router use to redirect traffic to internal devices?
Static NAT
What is one reason for administratively disabling unused ethernet connections on a switch in an office environment?
To prevent unauthorized access to the internal network
Why might someone configure a guest wireless network for Internet of Things devices rather than for guests, according to the text?
To provide secure internet access for Internet of Things devices
What is another term for a screened subnet?
Demilitarized zone
What is the purpose of disabling SSID broadcast on a wireless network?
To prevent the network from showing up on devices' available networks list
Why is it not recommended to use the default SSID names provided by manufacturers?
It makes it easy for attackers to look up default credentials
What type of encryption method is commonly used in home settings for wireless networks?
WPA3 Personal
What is the purpose of a pre-shared key (PSK) in wireless network security?
To provide a single key for network access
What authentication method is commonly used in office environments for wireless networks?
WPA2 Enterprise (802.1X)
What would be the consequence of leaving an organization without changing the pre-shared key on wireless access points?
Unauthorized access to the network
Study Notes
- Installing routers or access points in small offices or home offices (SoHos) requires changing default usernames and passwords for security reasons.
- Default credentials for SoHo routers and switches are publicly available online, making it easy for attackers to gain access.
- SoHo devices usually come with their own operating system, which is maintained by the manufacturer and updated via firmware.
- Regularly updating firmware ensures that devices have the latest security patches and features.
- Content filtering is a feature available in SoHo routers, which can be used to block traffic to specific IP addresses or websites.
- Two types of content filtering: allow list (block all traffic except for specific IP addresses or websites) and denial list (allow all traffic except for specific IP addresses or websites).
- SoHo devices often combine multiple functions (router, switch, firewall, content filter, etc.) into one piece of hardware.
- Some networks may prefer static IP address assignment instead of DHCP, but it does not provide additional security.
- Dynamic Host Configuration Protocol (DHCP) makes it easy to manage IP addresses by assigning them automatically when devices connect to the network.
- DHCP can also be used to create IP address reservations, which associate specific MAC addresses with assigned IP addresses.
- External IP addresses, also known as WAN IP addresses, are used for internet connectivity and may be dynamically assigned by internet service providers.
- Companies or organizations may prefer having a static external IP address to ensure consistent connectivity.
- Universal Plug and Play (UPnP) is a feature that allows routers to automatically configure themselves for applications that use it, but it can pose a security risk and should be disabled if not necessary.
- A screen subnet or demilitarized zone (DMZ) is a section of the network that is on the firewall but separated from the internal network, perfect for hosting services that need to be accessible from the internet while still being limited from the rest of the network.
Explore how configuring IP addresses on a DHCP server can simplify network management by automatically assigning IP addresses to connected devices. Learn about the benefits of ensuring consistent IP addresses for devices connecting to the network.
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
