Examkin

Soru

Zorluk: OrtaHost, Network, and Architecture Vulnerabilities

A security analyst reviews a vulnerability assessment report for an internal Network Attached Storage (NAS) appliance deployed on a dedicated storage management subnet. The audit report identifies two critical host and infrastructure vulnerabilities:

1. The storage management web console accepts cleartext HTTP traffic over TCP port 80 and retains factory default administrator credentials.
2. An unencrypted Telnet service is active on TCP port 23 for command-line access.

Which of the following hardening measures should the security team implement to remediate these specific vulnerabilities? (Select TWO.)

  1. Disable the Telnet service and enforce SSHv2 for encrypted command-line management access.Cevap
  2. Reconfigure the management interface to require HTTPS with TLS 1.3 and change all default administrative passwords.Cevap
  3. C
    Deploy a perimeter firewall at the enterprise border to filter inbound TCP ports 23 and 80 from external networks.
  4. D
    Configure a Web Application Firewall (WAF) rule to sanitize SQL queries sent to the NAS administration daemon.
  5. E
    Install an Intrusion Detection System (IDS) in passive mode to monitor cleartext management traffic on the local switch.

Cevap

The security team should disable Telnet in favor of SSHv2 and reconfigure the management console to enforce HTTPS while updating default credentials.
Remediating infrastructure management vulnerabilities requires enforcing cryptographic protocols (SSHv2 and HTTPS) to protect session data in transit and removing default credentials to ensure proper access control.

Adım Adım Çözüm

1
Identify the host and protocol vulnerabilities
The NAS appliance uses cleartext protocols (HTTP and Telnet) for management and retains default administrative credentials.
Unencrypted management channels allow credentials and session data to be captured in transit, while default credentials allow trivial unauthorized access.
2
Select appropriate transport security mitigations
Enforce SSHv2 instead of Telnet for CLI administration and HTTPS (TLS 1.3) instead of HTTP for web management.
Cryptographic transport protocols guarantee confidentiality and data integrity during administrative sessions.
3
Remediate host credential misconfigurations
Change factory default administrator credentials to unique, strong passwords.
Eliminating default passwords prevents attackers from gaining immediate administrative control.

Anahtar Kavram

Hardening host interfaces by replacing cleartext management protocols with secure alternatives and remediating default credential risks.
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Host, Network, and Architecture Vulnerabilities