Examkin

Question

Difficulty: MediumHost, Network, and Architecture Vulnerabilities

A security analyst conducts a host and network audit of a newly deployed industrial sensor gateway host. The audit reveals two vulnerability findings: the host's administrative web interface uses unencrypted HTTP with factory default credentials, and the host resides on a flat corporate network segment directly accessible to internal workstations. Which of the following recommendations should the analyst make to remediate these vulnerabilities? (Select TWO.)

  1. Enforce TLS encryption and update default credentials on the host's administrative interface.Answer
  2. Place the sensor gateway host into a dedicated VLAN with strict network microsegmentation rules.Answer
  3. C
    Install an inline network intrusion prevention system to sanitize SQL injection payloads in HTTP traffic.
  4. D
    Rely on the external edge firewall to block inbound external traffic while maintaining unencrypted internal access.
  5. E
    Attach physical chassis enclosure locks to serve as a detective security control against remote host configuration changes.

Answer

Enforcing TLS encryption with updated administrative credentials and isolating the host within a microsegmented VLAN directly remediate the identified host and network architecture vulnerabilities.
Updating default administrative credentials and requiring TLS encryption remediates the host management vulnerability, while assigning the host to a microsegmented VLAN addresses the network architecture exposure by preventing unauthorized internal communication.

Step-by-Step Solution

1
Identify the host management vulnerability and its corresponding mitigation.
Enforcing transport layer security (TLS) and changing factory default passwords remediates administrative cleartext exposure and weak authentication.
Host hardening standards require secure management protocols (HTTPS/TLS) and robust, non-default credentials.
2
Identify the network architecture vulnerability and its corresponding mitigation.
Placing the device in a microsegmented VLAN restricts unauthorized lateral movement across the flat corporate network.
Segmenting sensitive or specialized hosts minimizes attack surface and enforces least privilege network access.
3
Evaluate distractor options against the specific audit findings.
Eliminate choices that misapply application firewalls, rely on edge-only trust, or misclassify control functions.
Controls must align directly with the host management and network isolation deficiencies identified.

Key Concept

Host Hardening and Network Microsegmentation
Rate this question

Topics

Host, Network, and Architecture Vulnerabilities