Network Security Implementation and Operations
Configuration and Hardening
Operational security starts with secure baselines: disable unused services/ports, change defaults, enforce strong authentication, apply least privilege, and log centrally. Know hardening for switches, routers, firewalls, and wireless (WPA2/WPA3, 802.1X). Understand change management and configuration drift.
Cryptographic Implementation
Apply TLS correctly (certificate validation, modern cipher suites, disable legacy protocols), manage keys and certificates (rotation, revocation, PKI), and know where encryption belongs (in transit vs. at rest). Understand IPsec modes (transport vs. tunnel) and when each applies.
Access and Identity Operations
Implement AAA with RADIUS/TACACS+, MFA, and role-based access. Know the operational role of VPNs, jump hosts, and privileged access management.
Monitoring Hooks in Operations
Ensure logs, NTP synchronization, and syslog forwarding are configured so detection works. Time sync is a frequent operational question because correlation depends on it.
Worked Example / Rule of Thumb
When asked how to securely administer network devices, prefer an out-of-band management network with SSH, AAA, and logging - not Telnet with ACLs. Rule: management traffic should never share the data plane when avoidable.
Trap: 'encrypt everything' ignores key management; 'disable the port' may break availability. Choose the control that preserves required function while reducing exposure.