A security analyst inspects system configurations and network routing logs for a mission-critical database host following an internal security audit:
[SYS_AUDIT] Host: db-prod-01.internal (IP: 192.168.10.45)
[WARN] Service 'legacy-telemetry-daemon' active on 0.0.0.0:9090
[INFO] Configuration file /etc/telemetry.conf sets AUTH_REQUIRED=FALSE
[WARN] API endpoint provides unencrypted remote memory telemetry dumps via HTTP GET /sys/memdump
[WARN] Host routing table permits unrestricted cross-VLAN traffic from Staging-VLAN (10.20.0.0/16)
Based on the log output and audit findings, which of the following vulnerabilities or architecture deficiencies are directly present in this environment? (Select TWO.)
- Insecure service configuration allowing unauthenticated remote access to system memory resourcesAnswer
- Lack of network microsegmentation allowing implicit trust and open routing between staging and production zonesAnswer
- CExecution of client-side Cross-Site Scripting (XSS) scripts within the telemetry API parameter input
- DReliance on network-level firewall filtering to patch host-level software memory leak vulnerabilities
- EMisclassification of detective SIEM monitoring rules as preventive access control mechanisms
Answer
The correct vulnerabilities are insecure service configuration allowing unauthenticated remote memory access, and lack of network microsegmentation allowing implicit trust across subnets.
The scenario highlights two distinct architecture and host vulnerabilities: first, the telemetry service explicitly disables authentication (`AUTH_REQUIRED=FALSE`) while listening on all interfaces and providing unencrypted memory telemetry dumps over HTTP. Second, the network architecture fails to enforce microsegmentation, allowing unrestricted communication between the staging VLAN and the production database host.
Step-by-Step Solution
Key Concept
Host Service Hardening and Network Microsegmentation