Network-layer penetration testing should include which components?

Network-layer penetration testing should include which components?

• A. Components that support network functions and operating systems
• B. Only routers
• C. Only firewalls
• D. Only switches

Answer: (A)

Network-layer penetration testing should examine all components that support network functions and the operating systems running on them. This approach is essential because network security isn’t limited to a single device type; it includes every piece that processes, routes, or manages traffic as well as the software and services those devices run. Routers, switches, firewalls, load balancers, VPN gateways, and even the management interfaces and host OSes on those devices can harbor misconfigurations or vulnerabilities that could be exploited at the network layer. Testing only one category—like just routers or just firewalls—would miss other critical weaknesses in the network infrastructure and in the operating systems that control those devices. By covering all components that enable network functions and their operating systems, you get a comprehensive view of where to strengthen defenses and reduce risk.

Network-layer penetration testing should examine all components that support network functions and the operating systems running on them. This approach is essential because network security isn’t limited to a single device type; it includes every piece that processes, routes, or manages traffic as well as the software and services those devices run. Routers, switches, firewalls, load balancers, VPN gateways, and even the management interfaces and host OSes on those devices can harbor misconfigurations or vulnerabilities that could be exploited at the network layer. Testing only one category—like just routers or just firewalls—would miss other critical weaknesses in the network infrastructure and in the operating systems that control those devices. By covering all components that enable network functions and their operating systems, you get a comprehensive view of where to strengthen defenses and reduce risk.