A security analyst conducts an internal infrastructure assessment of an enterprise application environment. The assessment reveals two critical architectural findings:
1. Web application microservices communicate with back-end database servers across an unsegmented internal subnet using standard unencrypted HTTP endpoints.
2. No host-based firewalls or network access control lists (ACLs) are configured to restrict traffic between adjacent application servers on the same subnet.
Which of the following host, network, or architecture vulnerabilities are directly present in this environment? (Select TWO.)
- Transmission of sensitive internal communication over unencrypted cleartext protocolsCevap
- Lack of network microsegmentation allowing unrestricted lateral movementCevap
- CFailure of client-side web browsers to filter malicious Cross-Site Scripting (XSS) payloads
- DMisclassification of detective log monitoring controls as automated preventive firewalls
- EReliance on perimeter web application firewalls to block database buffer overflow exploits
Cevap
The environment suffers from transmission of sensitive internal communication over unencrypted cleartext protocols and a lack of network microsegmentation allowing unrestricted lateral movement.
The correct answers identify the specific architectural weaknesses in the scenario: sending data via HTTP is an unencrypted cleartext protocol flaw, and lacking host firewalls or ACLs on a flat subnet creates a microsegmentation flaw that permits lateral movement.
Adım Adım Çözüm
Anahtar Kavram
Host, Network, and Architecture Vulnerabilities (Cleartext Protocols & Microsegmentation)