Which of the following is a common security best practice for network devices?

• A. Disable authentication
• B. Implement logging and monitoring
• C. Leave all services enabled
• D. Ignore firmware updates

Answer: (B)

A key security practice for network devices is ensuring visibility through logging and monitoring. By capturing events like login attempts, configuration changes, and service status, and then continually analyzing that data, you can detect unusual or unauthorized activity, diagnose issues, and respond quickly. Centralized logs and alerts let you correlate activity across devices, spot patterns that indicate a breach or misconfiguration, and maintain an audit trail for compliance and investigations. In real-world setups, you’d enable logs, use a centralized log server or SIEM, and set up alerts for things like repeated failed logins, unexpected changes, or suspicious traffic.

Disabling authentication removes a critical barrier to access control, making it easy for someone to infiltrate the device. Leaving all services enabled unnecessarily broadens the attack surface, providing more potential entry points. Ignoring firmware updates means missing fixes for known vulnerabilities that attackers can exploit. Among these, logging and monitoring best supports ongoing security, visibility, and rapid response in everyday network operations.