Network Design Considerations

Across

hardware imposed network segmentation

best way to achieve defense in depth

using multiple types of authentication

redundant power

can also take action to prevent a breach from occurring

act of avoiding single points of failure

Down

precompiled lists of hashed passwords used in attacks

effective tool to limit network access and traffic

money already invested in the past

recording user activity and system events into a log

protects against drive failure