Exam N10-008 topic 1 question 344 discussion

I think it's 'A'. Here is my thought process: A security technique is needed that best secures physical networkink equipments. so...'B' 'C' 'D' answers are not gonna work since a person still is able to walk up to a device and cause harm, however out of the options given...option 'A' would best secure the physical devices.

Guys, I don't get why we're so mixed up on this one. The keywords are 'Secure PHYSICAL networking equipment'. The only one that would secure it PHYSICALLY would be disabling unneeded switch ports.

Gotta disable those switch ports. I'm a sysadmin, and recently had a PACS vendor showed up to install cameras, alarms, and magnetic locks at our site, and the first thing they did was plug their NVR into one of our switches without ever asking. Luckily, I'd disabled those ports because all the ACLs and password changes in the world wouldn't have stopped that.

B. Implementing role-based access Explanation: Role-based access control (RBAC) ensures that only authorized individuals can access certain parts of the IT closet and networking equipment. By assigning access based on roles (such as network admin, technician, etc.), only the appropriate personnel can perform maintenance or make changes to the network, reducing the risk of unauthorized changes or tampering by third-party vendors or other individuals who may have physical access to the shared space.

Vendor have access to the shared closet , so its not very hard to just use the same port as the switch is , so cant be A

RBAC ensures better security throughout the network based on roles deciding where users are allowed & disallowed. Trying to instead disable switchports would force you to hop between different switches & ports individually for access control which would be an administrative nightmare.

the key word is physical

"secure the physical networking equipment" For me securing the physical network equipment is A - disabling unneeded switchports"

The only option here that is related to physically touching the device is Option A.

Can't be role based access since that doesn't physically secure networking equipment.

Disabling unused ports can stop a bad guy from plugging a malicious device into an unused port and getting unauthorized access to the network. "secure the physical networking equipment"

I am leaning more towards "A". Though I would implement steps "C" & "A" together in practical. In the question it says the "Secure the physical networking equipment". I will start with Disabling the unneeded Switch ports and then I will change the default passwords. What I am thinking is, implementing option "C" alone will not secure it, because unused enabled switch ports can still be used/exploited. But if you implement option "A" alone will mostly secures the device I guess, I would still implement option "C" anyway. Aarghh... what a frustrating question is this ? or Am I overthinking???????? I am open/happy to see others' thought processes... but guys, CHATGPT or GPT3.5/4 or AI's thought process, thats just full of shit. I believe that we are better than AI.

But it is a shared closet, so you do not have complete control. A would be more logical than B

it says secure the pyshical networking equipment. for me it would be A.

B. Implementing role-based access correct

B. Implementing role-based access is correct

B. Implementing role-based access