CompTIA Network+ (N10-009) Domain 4: Network Security

Domain 4 — Network Security  Lock down the network—endpoints, links, and air. Across six 90-question, scenario-driven exams you’ll practice securing management, control, and data planes; encrypting data in transit and at rest; hardening infrastructure; enforcing identity and access; zoning and segmenting traffic; defending wireless edges; and identifying common attacks. Expect configs, packet captures, AAA/NAC flows, TLS/PKI validation issues, firewall/ACL snippets, WIPS alerts, and attack traces—plus “prove it works” verification steps.Short Descriptions D4-A • Security Foundations & IAMEncryption in transit/at rest; PKI & certificates; identity & access management (MFA, SSO, RADIUS, LDAP). TLS 1.3, AEAD/PFS, hashing vs encryption, AAA, SSO, SAML/OAuth2/OIDC.D4-B • Layer-2 & Interception AttacksVLAN hopping, MAC flooding, ARP poisoning/spoofing, rogue DHCP, on-path attacks. Detection, containment, and switch hardening mitigations.D4-C • DNS, Wireless Threats & Social EngineeringDNS poisoning/spoofing, rogue AP and evil twin detection, social engineering (phishing, tailgating), malware network signatures and containment controls.D4-D • NAC & Access ControlsNetwork Access Control posture checks, 802.1X/EAP flows, port security, MAC filtering, guest/BYOD isolation, dynamic VLAN assignment, key management touchpoints.D4-E • Device & Management-Plane HardeningDisable unused services, change defaults, SNMPv3/SSH/AAA protections, banner/logging policies, firmware/config integrity, golden templates and baseline validation.D4-F • Traffic Controls & ZoningACL design and troubleshooting, URL/content filtering, IDS/IPS overview, trusted/untrusted zones, DMZ and screened subnets, micro-segmentation to limit lateral movement.Disclaimer<