Chapter 13 Network Policies and Best
Practices
Core Idea
This chapter focuses on the development of procedures, practices, and policies designed to
mitigate procedural and/or legal problems and maximize appropriate usage of network
resources.
Instructor Focus
The focus of this topic centers on establishing policies in areas such as password usage and
complexity, user onboarding/user education, incident response and recovery procedures. Safety
Exam Objectives Covered by this Chapter/Lesson
x 3.5 Identify policies and best practices
Terminology
The following terms should be familiar to students for the purposes of understanding this chapter. Use
focus questions to call on the students to answer the questions using the terms and concepts they have
learned.
Complex Password
One Time Password(OTP)
Client certificate
Smart Card
Biometrics
Focus Questions
x What is the likely result of a lack of a password policy?
x How does a BYOD policy work in conjunction with Data Loss Prevention?
Icebreaker Discussion
Terry has just been hired by the Acme Company. He will have a role as assistant office manager for the
drug research and testing facility. This role includes maintaining documentation on active drug trials,
recording minutes of manager meetings and uploading them. He will have read/write access to the
employee vacation schedule as well as limited administrative rights to change permissions on employee
access to office printers. He is expected to maintain the Hazardous Substances log and publishes
updated notices to the team about hazardous chemicals being used. He will occasionally need to travel
Main Activities
Discussion and Case Study Activity
Acme Case Study: First Draft Security Policy Proposal
Review the ‘Real World Case Study’ in your text and summarized with additional detail below.
Acme Company is a pest control service in Arizona specializing in capturing very fast animals, such as
Roadrunners, which sometimes attack house cats. Because they have developed a very specialized
Referring to the Chapter 13 case study text, pay
particular attentions to the bulleted items and draft a
two paragraph abstract that could serve as an overview
of the policy you would design. Then work as a team to
review each other’s suggestions and create a draft
proposal. Include in your proposal a business continuity
plan in the event of a catastrophic disaster. Network+
Simulator Matching Activities
x Disaster Recovery/Business Continuity
Quiz Questions
Which of the following are typical of a complex(strong) password requirement?
Upper/Lowercase letters, numbers, symbols, no common names or words, and minimum of 8 characters
Upper and Lowercase letters, numbers, and minimum of 5 characters
Answer: Upper/Lowercase letters, numbers, symbols, no common names or words, and minimum of 8
characters
Which of the following policy references would be related to the safety policy?
Hearing protection recommendation
When using an SDLC, which of the following is the first stage of the cycle?
Preliminary System Design
Utilization and Support
Production/Construction
Conceptual Design
Detail Design
Answer: Conceptual Design
An organization that does business in or has a presence across international borders must specifically
include which one of the following in its security policy?
A janitor, a sales representative, a senior Director of Research, and a network administrator are
receiving their new employee orientation on the same day. The HR representative hands out an NDA to
all of them, and a PUA to one of them. Who got the PUA?
Janitor,
Sales representative
Senior Director of Research