CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Network Basics and Security
A firm's employees in Chennai connect laptops to the office network through wireless access points, and the IT head wants to prevent a former employee from using the old shared password. Which combination best reflects sound network security practice and also helps the firm show reasonable security practices under the Information Technology Act, 2000?
The best choice is strong wireless encryption such as WPA3 or WPA2 with individual credentials, prompt revocation for departed staff, and access logging. This is a recognised control set and supports a body corporate's duty to maintain reasonable security practices under the IT Act. Hiding the network name or removing encryption gives little or no protection.
- AKeep the shared password and hide the network name only
- BUse WPA3 or WPA2 encryption with individual credentials, revoke access of departed staff, and maintain access logsCorrect
- CSwitch off encryption to improve speed and rely on antivirus
- DUse an open guest network for all staff and monitor complaints
Explanation
Strong wireless encryption, unique credentials, prompt revocation and logging are recognised security controls and support the duty of a body corporate to maintain reasonable security practices when handling sensitive personal data. Hiding the network name is not real protection, and open networks or disabled encryption expose data.
Did you get it right without looking?
One question tells you little. A timed set on Network Basics and Security shows your real accuracy, how long you take and where you lose marks.
More Network Basics and Security questions
- A company secretary of a Pune-based firm explains that the office's computers, printers and servers on one floor are connected within a sing…
- A company secretary reviewing a data-breach incident at Sharma Fintech finds that an attacker captured data frames on the local Ethernet seg…
- Ritu Enterprises, a Delhi firm, uses the internet to let its employees reach the company's private network securely from home through an enc…
- Under the Information Technology Act, 2000, which authority or entity issues a Digital Signature Certificate that links a subscriber to a pu…
- Mehta Textiles Ltd. uses a firewall that filters traffic purely on source and destination IP addresses. At which OSI layer does this filteri…
- A company secretary of a Mumbai firm wants to send a confidential board resolution draft to a director so that only the director can read it…