Tailgatingis a physical security breach where someone follows an authorized person into a restricted area without proper credentials. Once inside, the attacker can install rogue devices like unauthorized APs.
* A. Evil twinis a wireless attack where an attacker sets up a fake AP.
* B. Honeytrapis used to attract attackers for analysis.
* C. Wardrivinginvolves scanning for unsecured Wi-Fi networks while driving, not physical intrusion.
#Reference:
CompTIA Network+ N10-009 Official Objectives: 4.2 - Identify common security threats and vulnerabilities.

Explanation:
A = 192.168.10.0/26
B = 192.168.1.0/23
C = 10.0.0.1/18
Using the choices shown in the screenshot, the best-fit subnet selections are based on host growth requirements first, then segmentation.
For Company A, the current device count is 32. With 20% growth, that becomes about 39 devices. A /27 only supports 30 usable hosts, so it is too small. A /26 supports 62 usable hosts, so 192.168.10.0/26 is the correct choice.
For Company B, the current device count is 100. With 20% growth, that becomes 120 devices. The smallest correct subnet would normally be a /25 with 126 usable hosts, but that option is not shown. From the available choices, 192.168.1.0/23 is the smallest subnet that still supports more than 120 hosts, so that is the best answer.
For Company C, the current device count is 10,000. With 20% growth, it needs space for 12,000 hosts. A /18 provides 16,382 usable hosts, while a /19 is not available and a /21 or /22 would be far too small. Therefore,
10.0.0.1/18 is the correct selection.
One important note: the dropdown choices shown do not actually let all three companies be placed into a single true Class B network block. So these answers are the best valid selections from the provided options.

* Understanding End-of-Support:
* End-of-Support Status: When a vendor declares a device as end-of-support, it means the device will no longer receive updates, patches, or technical support. This poses a security risk as new vulnerabilities will not be addressed.
* Risks of Keeping an End-of-Support Device:
* Security Vulnerabilities: Without updates, the switch becomes susceptible to new security threats.
* Compliance Issues: Many regulatory frameworks require that critical infrastructure be maintained with supported and secure hardware.
* Best Next Step - Replacement:
* Decommission and Replace: The most secure approach is to replace the end-of-support switch with a new, supported model. This ensures the infrastructure remains secure and compliant with current standards.
* Planning and Execution: Plan for the replacement by evaluating the network's needs, selecting a suitable replacement switch, and scheduling downtime for the hardware swap.
* Comparison with Other Options:
* Apply the Latest Patches: While helpful, this does not address future vulnerabilities since no further patches will be provided.
* Ensure the Current Firmware Has No Issues: This is only a temporary measure and does not mitigate future risks.
* Isolate the Switch from the Network: Isolating the switch may disrupt network operations and is not a viable long-term solution.
References:
* CompTIA Network+ study materials on network maintenance and security best practices.

802.1x is a network access control protocol that provides an authentication mechanism to devices trying to connect to a LAN or WLAN. This ensures that only authorized devices can access the network, making it ideal for mitigating the risk of unknown devices connecting to the network, especially in accessible areas.
* 802.1x Authentication: Requires devices to authenticate using credentials (e.g., username and password, certificates) before gaining network access.
* Access Control: Prevents unauthorized devices from connecting to the network, enhancing security in public or semi-public areas.
* Implementation: Typically used in conjunction with a RADIUS server to manage authentication requests.
Network References:
* CompTIA Network+ N10-007 Official Certification Guide: Covers 802.1x and its role in network security.
* Cisco Networking Academy: Provides training on implementing 802.1x for secure network access control.
* Network+ Certification All-in-One Exam Guide: Explains the benefits and configuration of 802.1x authentication in securing network access.

PAT (Port Address Translation) allows multiple devices on a local network to share a single public IP address when accessing the internet. It translates the private IP addresses to a single public IP with different port numbers for each session. The document states:
"PAT (Port Address Translation) allows multiple devices on a LAN to share a single public IP address by assigning unique port numbers to each session, enabling internet connectivity for all devices."