Unit 5: Network Security Assessment

A network security assessment is the process of checking a network for weaknesses, risks, and possible security problems. The goal is to find issues before an attacker does.

Why Network Security Assessments Matter

Network security assessments are important because they help organizations:

  • Find vulnerabilities in devices and systems

  • Identify weak passwords or poor security settings

  • Check for outdated software

  • Improve overall network protection

This helps reduce the chances of cyberattacks, data breaches, and unauthorized access.

Basic Steps in a Network Security Assessment

A basic network security assessment usually includes these steps:

  1. Identify devices on the network

    This means finding computers, servers, routers, printers, and other connected devices.

  2. Check for open ports and services

    Open ports can allow communication into or out of a device. Some open ports are normal, but unnecessary ones can be a security risk.

  3. Look for vulnerabilities

    Vulnerabilities are weaknesses that attackers may be able to exploit. These could include missing updates, weak passwords, or unsafe configurations.

  4. Review security settings

    This includes checking firewalls, antivirus, user permissions, and device configurations.

  5. Document findings

    After the assessment, the results should be written down so problems can be fixed.

Common Things to Look For

During a network security assessment, some common issues include:

  • Weak or reused passwords

  • Devices missing software updates

  • Too many open ports

  • Unsecured Wi-Fi networks

  • Users having too many permissions

  • Disabled or missing firewall protection

Important Terms

Vulnerability

A weakness in a system that could be used by an attacker.

Open Port

A communication point on a device that may allow network traffic in or out.

Firewall

A security tool that helps block unwanted traffic.

Configuration

The settings and setup of a device or system.

Simple Example

Imagine a small business network. During a security assessment, the IT team finds:

  • A computer with an outdated operating system

  • A router using a weak password

  • A server with unnecessary open ports

These issues may not mean the network is already hacked, but they are security risks that should be fixed.

Summary

  • A network security assessment checks for weaknesses in a network

  • It helps find risks before attackers do

  • Common tasks include checking devices, ports, vulnerabilities, and settings

  • The goal is to improve security and reduce risk

Network Security Assessment Quiz

  1. What is the main purpose of a network security assessment?

    1. To make the internet faster

    2. To find weaknesses and security risks

    3. To install games on computers

    4. To replace all devices

  2. Which of the following is usually checked during a network security assessment?

    1. Open ports

    2. Wallpaper settings

    3. Music files

    4. Keyboard color

  3. What is a vulnerability?

    1. A type of firewall

    2. A weakness that could be exploited

    3. A secure password

    4. A network cable

  4. Why can open ports be a security concern?

    1. They make computers heavier

    2. They can allow communication that attackers may use

    3. They remove antivirus software

    4. They stop devices from connecting to Wi-Fi

  5. Which of the following is a common issue found during a network security assessment?

    1. Strong passwords

    2. Updated software

    3. Weak passwords

    4. Encrypted traffic

  6. What should be done after the assessment is complete?

    1. Ignore the results

    2. Delete all devices

    3. Document the findings

    4. Turn off the network forever

Answer Key

  1. b

  2. a

  3. b

  4. b

  5. c

  6. c