Question

What will you review and assess within the LAN-to-WAN Domain as part of this security assessment?

Answer 1

Answer:

Major device which is present in this domain is router. This is the only domain where all data enters or exits through internet. So lots of threat and vulnerabilty are associated with this domain. This domain contains all physical and logical system of securities. It is one of the most important domain which needs to be secured in the whole Infrastructure. DMZ(Demilitarized zone) which is the segment of LAN in the domain of LAN to WAN that plays role in managing traffic.

Threat and vulnerability associated with this domain and their mitigation:-

• LAN is accessible to unauthorized: This can be mitigated by securing data centers and being sure of data closets. And by Avoiding entry with improper ID.
• Data and system are accessible to unauthorized: This can be mitigated by changing the policies of accessing data and systems according to the guidelines which keep the system and data secure. This can be done by applying multi-level indentity check to access the systems and data.
• Vulnerability in OS software: To mitigate this there should be a time to time assessment for checking bugs and error in software.