A network security review should include which items?

• A. Network device hardening standards; approval process when connecting new devices or firewall rule changes; outbound scans for malware, malicious/blacklisted sites, data policy violations
• B. Password policy for users
• C. Physical server cabling diagram
• D. Marketing department budget

Answer: (A)

A network security review focuses on how the network is configured, governed, and monitored to reduce risk. The best set of items includes network device hardening standards to minimize vulnerabilities, a formal approval process for connecting new devices or changing firewall rules to ensure changes are authorized and traceable, and outbound scans that check for malware, access to malicious or blacklisted sites, and data policy violations to detect threats and enforce policies. Together, these cover secure configuration, change governance, and outbound monitoring—the core activities of a network security review. While password policies are important for overall security, they belong to broader information security rather than the network-specific review. A physical cabling diagram is a physical layout artifact, not a security control, and a marketing budget is unrelated to network security.