Examkin

Question

Difficulty: EasyHost, Network, and Architecture Vulnerabilities

Match each infrastructure risk scenario to its corresponding host, network, or architecture vulnerability classification.

  • An enterprise server running an operating system past its vendor End-of-Life (EOL) date without security updatesUnsupported software vulnerability
  • A network management service transmitting administrative credentials across the local network in unencrypted plain textCleartext transmission vulnerability
  • A newly deployed network switch operating with factory administrative username and password settingsDefault configuration vulnerability
  • A corporate network environment designed without VLANs or subnet boundaries between guest users and critical database serversArchitecture / Lack of network segmentation vulnerability

Answer

The enterprise server past EOL matches Unsupported software vulnerability; the network management service transmitting plain text credentials matches Cleartext transmission vulnerability; the network switch with factory credentials matches Default configuration vulnerability; and the corporate network without subnets or VLANs matches Architecture / Lack of network segmentation vulnerability.
Each scenario directly illustrates a core infrastructure vulnerability category: operating an unpatched EOL system creates an unsupported software vulnerability; transmitting unencrypted credentials creates a cleartext transmission vulnerability; retaining factory passwords creates a default configuration vulnerability; and placing all devices on a flat, unsegmented network creates an architecture vulnerability.

Step-by-Step Solution

1
Analyze host-level system lifecycle status
Identify that running software beyond vendor support end date leaves unpatched flaws exposed
Systems past EOL represent unsupported software vulnerabilities.
2
Analyze network protocol transmission behavior
Identify that transmitting sensitive administrative data without cryptographic protection allows packet sniffing
Unencrypted traffic constitutes a cleartext transmission vulnerability.
3
Evaluate system configuration hardening
Identify that active factory credentials on network hardware enable easy unauthorized initial access
Using factory settings creates a default configuration vulnerability.
4
Evaluate network topology and boundaries
Identify that missing subnets or logical isolation allow unrestricted network traffic between low-trust guests and high-trust servers
A flat network lacking isolation represents an architecture vulnerability.

Key Concept

Host, Network, and Architecture Vulnerabilities
Rate this question

Topics

Host, Network, and Architecture Vulnerabilities