Network Security Quiz: Hardening · Passwords · ACLs · Wi-Fi

1. Why should Telnet be replaced with SSH for remote management?

Telnet is slower Telnet sends credentials and commands as plain unencrypted text Telnet only works locally Telnet requires a paid license

2. `enable secret` is more secure than `enable password` because it hashes the password instead of storing it in reversible form.

True False

3. What's the difference between a standard and an extended ACL?

Standard ACLs only filter by source IP; extended ACLs can also filter by destination, protocol, and port Extended ACLs can only deny traffic, never permit it Standard ACLs work on switches, extended ACLs work on routers There's no real difference

4. Every Cisco ACL has an implicit 'deny all' at the very end, even if you never typed it.

True False

5. Which Wi-Fi security setting should you avoid in production?

WPA3 WPA2-AES WEP 802.1X with RADIUS

6. Why should WPS be disabled on access points?

It slows down the network It's trivially brute-forced, undermining otherwise strong Wi-Fi security It only works with WEP It's required for guest networks