Preventing Unauthorized Access: SOHO Router Installation and Maintenance | CompTIA Network+ Exam N10-007

Key Practices for Securing Your SOHO Router

Prev Question Next Question

Question

A technician is installing a SOHO router.

Which of the following should be performed on every installation and periodically maintained to prevent unauthorized access? (Choose two.)

A.

Disable remote management B.

Update the router firmware C.

Disable port forwarding D.

Use complex passwords E.

Disable the SSID broadcast.

BD.

Explanations

A technician is installing a SOHO router.

Which of the following should be performed on every installation and periodically maintained to prevent unauthorized access? (Choose two.)

A.

Disable remote management

B.

Update the router firmware

C.

Disable port forwarding

D.

Use complex passwords

E.

Disable the SSID broadcast.

BD.

The two correct answers for this question are B) Update the router firmware and D) Use complex passwords.

Explanation: SOHO (Small Office/Home Office) routers are used to connect devices in a small office or home network to the internet. These routers usually come with default settings that need to be configured and maintained to ensure the security of the network.

B) Update the router firmware: Router firmware is software that controls the router's functions, including security features. Firmware updates often include security patches to fix vulnerabilities that can be exploited by attackers. Therefore, it is important to keep the router firmware up to date to prevent unauthorized access.

D) Use complex passwords: A password is a form of authentication used to verify the identity of users who want to access the network. A weak password can be easily guessed or cracked by attackers, allowing them to gain unauthorized access to the network. Therefore, it is important to use complex passwords that are difficult to guess and contain a combination of upper and lower case letters, numbers, and special characters.

A) Disable remote management: Remote management allows the router to be managed from a remote location. While this can be convenient, it can also be a security risk as it allows attackers to access the router from outside the network. Therefore, it is recommended to disable remote management, but it is not a requirement for every installation.

C) Disable port forwarding: Port forwarding is a feature that allows incoming traffic from the internet to be directed to a specific device on the network. While this can be useful for certain applications, it can also be a security risk if not configured properly. Therefore, it is recommended to disable port forwarding if it is not needed, but it is not a requirement for every installation.

E) Disable the SSID broadcast: The SSID is the name of the wireless network that devices use to connect to the router. By default, routers broadcast the SSID, making it visible to anyone within range. While disabling the SSID broadcast can make the network less visible to attackers, it can also make it more difficult for legitimate users to connect to the network. Therefore, it is not a requirement for every installation, but it is a recommended security measure.