2.10 - CompTIA A+ Core 2

Changing default passwords

A security practice in SOHO networks to prevent attackers from guessing passwords based on default credentials.

IP Filtering

A feature that allows administrators to control traffic flow by specifying which IP addresses or FQDNs are permitted or denied access.

Firmware updates

Upgrades to the router's OS/software that typically contain bug fixes or security updates.

Content Filtering

A network feature that denies access to certain websites deemed insecure or inappropriate for work/parental controls.

Physical Placement/Secure Locations

The practice of installing networking equipment in areas safe from environmental threats and unauthorized access.

Universal Plug and Play (UPnP)

A feature that allows automatic configuration of routers by communicating with applications to facilitate access.

Screened Subnet

An isolated segment of a private network that can access the internet while protecting sensitive resources.

Management Access

Access to a SOHO router that must be tightly controlled with a complex password and, if possible, an additional authentication factor.

Service Set Identifier (SSID)

The unique name for a wireless network, used to distinguish it from others.

Disabling SSID Broadcast

Prevents the network name from being publicly broadcast, making it less visible to casual users.

Open System Encryption

Wi-Fi encryption that uses no password, common for public Wi-Fi networks.

WPA2/3-PSK

WPA2/3 encryption using a 256-bit pre-shared key for every connected device.

WPA2/3-802.1X

WPA2/3 encryption that utilizes a centralized authentication server.

Configuring Guest Access

Limiting guest network access to outsiders, primarily for IoT devices or lab networks.

Firewall Settings

Configured rules to block unauthorized access and monitor unusual traffic.

Disabling Unused Ports

A security practice that reduces vulnerabilities by limiting access points.

Port Forwarding

Redirects traffic to allow external devices access to services on a private network.