OBJ 4.3

Question 1

• Best practices
• Secure SNMP
• Router Advertisement (RA) Guard
• Port security
• Dynamic ARP inspection
• Control plane policing
• Private VLANs
• Disable unneeded switchports
• Disable unneeded network services
• Change default passwords
• Password complexity/length
• Enable DHCP snooping
• Change default VLAN
• Patch and firmware management
• Access control list
• Role-based access
• Firewall rules
• Explicit deny
• Implicit deny
• Wireless security
• MAC filtering
• Antenna placement
• Power levels
• Wireless client isolation
• Guest network isolation
• Preshared keys (PSKs)
• EAP
• Geofencing
• Captive portal
• IoT access considerations