Examkin

Soru

Zorluk: OrtaHost, Network, and Architecture Vulnerabilities

A security analyst reviews a active network service list and vulnerability report for an internal host managing legacy industrial control equipment:

tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 1042/ftpd
tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN 1108/telnetd

The report confirms that administrative management sessions and file uploads to this server transmit credentials in plaintext without restricted network access control lists (ACLs). Which TWO of the following architectural weaknesses or vulnerabilities are directly demonstrated in this scenario? (Select TWO.)

  1. Transmission of sensitive administrative traffic over unencrypted legacy management protocolsCevap
  2. Over-reliance on perimeter boundary security allowing unverified internal network traffic to reach open management servicesCevap
  3. C
    Exposure of database backends through unvalidated user input via Cross-Site Scripting (XSS)
  4. D
    Misclassification of detective logging controls as preventive network filtering controls
  5. E
    Deployment of endpoint detection software to resolve network-level cleartext protocol exposure

Cevap

The correct options identify the transmission of administrative traffic over unencrypted legacy management protocols and the over-reliance on perimeter boundary security allowing unverified internal network traffic to reach open management services.
The scenario highlights two distinct architectural vulnerabilities: using unencrypted legacy protocols (Telnet and FTP) that expose credentials, and operating a flat network model where internal management services are exposed to all internal endpoints without access controls.

Adım Adım Çözüm

1
Analyze the service output and vulnerability report findings
The host is listening on TCP ports 21 (FTP) and 23 (Telnet), both of which are unencrypted legacy protocols.
Telnet and FTP pass administrative credentials and commands in cleartext, making them vulnerable to network interception.
2
Evaluate the architectural network context
The services are exposed to the broader internal network without access restrictions or microsegmentation.
Relying on boundary firewalls without restricting internal access assumes the internal network is trusted, violating Zero Trust principles.

Anahtar Kavram

Host and Network Architecture Vulnerabilities
Bu soruyu puanla

Konular

Host, Network, and Architecture Vulnerabilities