CCNA: Cisco Certified Network Associate — Question 498

Which two practices are recommended for an acceptable security posture in a network? (Choose two.)

Answer options

• A. Use a cryptographic keychain to authenticate to network devices.
• B. Place internal email and file servers in a designated DMZ.
• C. Back up device configurations to encrypted USB drives for secure retrieval.
• D. Disable unused or unnecessary ports, interfaces, and services.
• E. Maintain network equipment in a secure location.

Correct answer: D, E

Explanation

Options D and E are correct because disabling unused ports and services reduces the attack surface, while maintaining equipment in a secure location protects against physical tampering. Options A, B, and C, while important, do not directly contribute to the overall security posture as effectively as D and E.