Implementing Network Device Hardening

Which of the following can be done to implement network device hardening? (Choose two.)

A.

Implement spanning tree

B.

Perform VLAN hopping

C.

Patch and update

D.

Perform backups

E.

Enable port mirroring

F.

Change default admin password.

CF.

Network device hardening refers to the process of securing and protecting network devices against potential security threats. The two options that can be done to implement network device hardening are patch and update and change default admin password.

1. Patch and Update: One of the most critical steps in hardening a network device is to keep it up to date with the latest patches and updates. Network devices often have vulnerabilities that are discovered and patched by manufacturers. Regularly patching and updating devices can help mitigate these vulnerabilities and keep the device secure.

2. Change Default Admin Password: Changing the default admin password is an essential step in securing a network device. Default passwords are often publicly known and widely used, making them an easy target for attackers. Changing the default password to a strong and unique one can make it much harder for an attacker to gain access to the device and compromise the network.

The other options listed in the question do not relate to network device hardening:

• Implementing spanning tree protocol (STP) is a network protocol that prevents loops in a network. It does not contribute to network device hardening.
• VLAN hopping is a security exploit that takes advantage of the way VLANs are configured. It does not help with network device hardening.
• Performing backups is a best practice for disaster recovery and business continuity, but it does not contribute to network device hardening.
• Enabling port mirroring is a feature that allows network traffic to be copied from one port to another for analysis. It does not help with network device hardening.

In summary, the two options that can be done to implement network device hardening are patch and update and change default admin password.