Examkin

Question

Difficulty: EasyHost, Network, and Architecture Vulnerabilities

An organization is conducting a baseline security audit of its internal servers and infrastructure. Match each identified host or architecture vulnerability on the left with its corresponding primary risk on the right.

  • Legacy / End-of-Life Operating SystemAbsence of vendor security patches, leaving known system flaws unmitigated.
  • Open Unnecessary Network PortsUnintended expansion of the system attack surface to remote scanning.
  • Default Factory CredentialsHigh susceptibility to initial unauthorized access using publicly known passwords.
  • Unquoted Windows Service PathPotential for local privilege escalation through malicious binary placement.

Answer

Legacy / End-of-Life Operating System pairs with absence of vendor security patches; Open Unnecessary Network Ports pairs with unintended expansion of the system attack surface; Default Factory Credentials pairs with high susceptibility to initial unauthorized access using publicly known passwords; Unquoted Windows Service Path pairs with potential for local privilege escalation.
Each host and infrastructure vulnerability directly correlates to its primary risk: unsupported operating systems suffer from a lack of vendor security patches, open ports expand the host network attack surface, default credentials enable trivial authentication bypass, and unquoted service paths enable local privilege escalation.

Step-by-Step Solution

1
Analyze each host and network architecture vulnerability term.
Identify the distinct risk vector introduced by each misconfiguration or unsupported system state.
Host vulnerabilities stem from unpatched software, excessive running services, weak authentication defaults, or file path misconfigurations.
2
Match each vulnerability directly to its primary security consequence.
EOL software corresponds to missing vendor patches; open listening ports correspond to expanded attack surface; default passwords correspond to unauthorized credential access; unquoted service paths correspond to local privilege escalation.
Aligning specific host vulnerabilities with their corresponding exploit mechanics allows proper risk assessment and remediation prioritization.

Key Concept

Host, Network, and Architecture Vulnerabilities
Rate this question

Topics

Host, Network, and Architecture Vulnerabilities