This lesson covers hardening techniques.

Objectives and Skills

Objectives and skills for the hardening techniques portion of Network+ certification include:^[1]

• Given a scenario, implement network hardening techniques
  • Anti-malware software
    • Host-based
    • Cloud/server-based
    • Network-based
  • Switch port security
    • DHCP snooping
    • ARP inspection
    • MAC address filtering
    • VLAN assignments
      • Network segmentation
  • Security policies
  • Disable unneeded network services
  • Use secure protocols
    • SSH
    • SNMPv3
    • TLS/SSL
    • SFTP
    • HTTPS
    • IPsec
  • Access lists
    • Web/content filtering
    • Port filtering
    • IP filtering
    • Implicit deny
  • Wireless security
    • WEP
    • WPA/WPA2
      • Enterprise
      • Personal
    • TKIP/AES
    • 802.1x
    • TLS/TTLS
    • MAC filtering
  • User authentication
    • CHAP/MSCHAP
    • PAP
    • EAP
    • Kerberos
    • Multifactor authentication
    • Two-factor authentication
    • Single sign-on
  • Hashes
    • MD5
    • SHA

Readings

Multimedia

1. Watch YouTube: Anti-Malware Software - CompTIA Network+ N10-006 - 3.3.
2. Watch YouTube: Switch Port Security - CompTIA Network+ N10-006 - 3.3.
3. Watch YouTube: Security Policies - CompTIA Network+ N10-006 - 3.3.
4. Watch YouTube: Disabling Unneeded Network Services - CompTIA Network+ N10-006 - 3.3.
5. Watch YouTube: Using Secure Protocols - CompTIA Network+ N10-006 - 3.3.
6. Watch YouTube: Access Lists - CompTIA Network+ N10-006 - 3.3.
7. Watch YouTube: Wireless Security - CompTIA Network+ N10-006 - 3.3.
8. Watch YouTube: User Authentication - CompTIA Network+ N10-006 - 3.3.
9. Watch YouTube: Hashing - CompTIA Network+ N10-006 - 3.3.

Activities

References