Account Management

Correct Answer: Enforce strong password policies

To improve account security, the network administrator should 'Enforce strong password policies'. Strong password policies might include requirements for password length, complexity and expiration. This makes it more difficult for unauthorized users to access the account. On the other hand, 'Give all users administrative access' would actually reduce security, as more users would be able to alter critical system settings. Similarly, 'Use a single shared account for all users' would not improve security because if the shared user account's security is compromised, it would affect all users. Moreover, 'Disable account lockout policies' means that an attacker could try to guess the password unlimited times without being locked out, which would make it easier for them to gain unauthorized access.

Correct Answer: Implement the principle of least privilege

The principle of least privilege (PoLP) is the practice of limiting access rights for users to the bare minimum permissions they need to perform their work. This enhances security and reduces potential for malicious or accidental damage of the system. Implementing this principle in the given scenario will ensure that each new employee is given permissions according to their job role, nothing more or less. Assigning all users the same permissions or giving all users administrative privileges are not best practices and certainly can lead to security vulnerabilities. Similarly, permissions should not be granted based on a user’s length of service as the type and level of access required is not necessarily correlated with the duration for which an employee has been in service.

Correct Answer: Role-Based Access Control (RBAC)

The best answer to limit access to certain network resources based on user roles within the company is Role-Based Access Control (RBAC). This system works by assigning roles to users, and permissions to roles. Hence, users gain access to network resources based on their roles, effectively limiting the access as required. On the other hand, Network Address Translation (NAT) is a method that reassigns IP address information, which doesn't deal with user roles or access control. Quality of Service (QoS) refers to managing network resources to provide a certain level of performance. It also isn't specifically designed for access control. Lastly, Dynamic Host Configuration Protocol (DHCP) is a protocol used to assign IP addresses and other network settings to devices on a network but does not manage user roles or permissions.