ccna 200-301 exam review

ccna 200-301 exam review.1.1.5.4 Goals of a Network Security PolicyA network security policy is not just about device requirements and processes; it also drives the security practitioner to protect network resources by taking all requirements into account.For a company, a security policy is a set of goals; for users and administrators, a set of behavioral rules; for systems and administration, a set of requirements; together, they protect the security of networks and computer systems within an organization. A security policy is a "living document," which means that it never ends and is updated as technology, business, and employee needs change.For example, the laptops of employees in an organization are subject to various types of attacks (e.g., email viruses). And a cybersecurity policy can clearly define how often antivirus software is updated, and it will require that an updated virus database must be installed. In addition, a network security policy includes rules for user behavior (e.g., what they can and cannot do). A network security policy is usually a formal Acceptable Use Policy (AUP), which must be as clear as possible to avoid ambiguity or misinterpretation. For example, an AUP may list Usenet newsgroups that are banned.Although the security policy should be comprehensive and broad, it should also be concise enough to be easy to follow and use by technical practitioners within the organization.10 Chapter 1 Modern Cybersecurity Weyrib'1.2 Viruses, worms and Trojan horses1.2.1 Viruses1.2.1.1 Major Vulnerabilities of End-User DevicesEnd-user devices are most vulnerable to viruses, worms, or Trojan horses.