A security analyst conducts an internal infrastructure assessment of an enterprise application environment. The assessment reveals two critical architectural findings:
1. Web application microservices communicate with back-end database servers across an unsegmented internal subnet using standard unencrypted HTTP endpoints.
2. No host-based firewalls or network access control lists (ACLs) are configured to restrict traffic between adjacent application servers on the same subnet.
Which of the following host, network, or architecture vulnerabilities are directly present in this environment? (Select TWO.)
- Transmission of sensitive internal communication over unencrypted cleartext protocolsAnswer
- Lack of network microsegmentation allowing unrestricted lateral movementAnswer
- CFailure of client-side web browsers to filter malicious Cross-Site Scripting (XSS) payloads
- DMisclassification of detective log monitoring controls as automated preventive firewalls
- EReliance on perimeter web application firewalls to block database buffer overflow exploits
Answer
The environment suffers from transmission of sensitive internal communication over unencrypted cleartext protocols and a lack of network microsegmentation allowing unrestricted lateral movement.
The correct answers identify the specific architectural weaknesses in the scenario: sending data via HTTP is an unencrypted cleartext protocol flaw, and lacking host firewalls or ACLs on a flat subnet creates a microsegmentation flaw that permits lateral movement.
Step-by-Step Solution
Key Concept
Host, Network, and Architecture Vulnerabilities (Cleartext Protocols & Microsegmentation)