Question

Difficulty: MediumHost, Network, and Architecture Vulnerabilities

Match each host and infrastructure vulnerability scenario to the underlying security weakness or misconfiguration it represents.

  • An internal management host transmitting network monitoring telemetry using SNMPv1 across local subnets.Cleartext protocol exposure allowing management traffic interception.
  • A third-party background service executable located in a directory with full write permissions assigned to non-administrative users.Weak file system permissions enabling local privilege escalation.
  • An internal database server bound to a public interface without perimeter firewall rules or VLAN isolation.Improper network segmentation exposing internal database services.
  • A legacy host operating system past end-of-life running unpatched network daemons with known exploit modules.Unsupported legacy software vulnerable to known remote exploits.

Answer

The scenarios match their respective security weaknesses as follows: SNMPv1 traffic matches cleartext protocol exposure; weak file permissions on executable directories match local privilege escalation risk; unsegmented database service exposure matches improper network segmentation; and unpatched end-of-life operating systems match unsupported legacy software vulnerability risk.
Each scenario maps directly to its specific vulnerability classification. SNMPv1 does not support encryption, exposing management strings in cleartext. Allowing standard users write access to service binary paths enables local file modification and privilege escalation. Exposing internal database ports directly without firewall or VLAN boundaries represents a breakdown in network segmentation. Continuing to host end-of-life operating systems exposes environments to known unpatched vulnerabilities.

Step-by-Step Solution

1
Analyze each scenario to isolate the core vulnerability mechanism.
Scenario 1 involves plain-text transmission; Scenario 2 involves excessive local file modification rights; Scenario 3 involves lack of network zone controls; Scenario 4 involves unpatched legacy systems.
Proper classification requires pinpointing the root cause vulnerability at the protocol, operating system, or network architecture layer.
2
Pair each scenario with its corresponding architectural or configuration flaw description.
SNMPv1 pairs with cleartext protocol exposure; writeable executable path pairs with privilege escalation; direct external database access pairs with improper network segmentation; end-of-life OS pairs with unsupported legacy software risk.
This establishes clear alignment between technical indicators and vulnerability management classifications.

Key Concept

Host, Network, and Architecture Vulnerabilities
Rate this question