Examkin

Soru

Zorluk: KolayHost, Network, and Architecture Vulnerabilities

A security technician is categorizing host and network vulnerabilities discovered during an enterprise infrastructure audit. Match each vulnerability descriptor on the left with its primary architectural risk on the right.

  • Unpatched Out-of-Band (OOB) Baseboard Management Controller (BMC)Direct hardware-level control bypassing host operating system security controls
  • Use of unencrypted SNMPv1 community strings across network subnetsInterception of telemetry data and management passwords via network sniffing
  • Unauthenticated HTTP access to Instance Metadata Service (IMDS)Temporary cloud identity credential harvesting via Server-Side Request Forgery (SSRF)
  • Unsupported End-of-Life (EOL) operating system on an unsegmented networkUnmitigated exploit execution enabling rapid lateral movement

Cevap

Unpatched Out-of-Band (OOB) Baseboard Management Controller (BMC) matches Direct hardware-level control bypassing host operating system security controls; Use of unencrypted SNMPv1 community strings across network subnets matches Interception of telemetry data and management passwords via network sniffing; Unauthenticated HTTP access to Instance Metadata Service (IMDS) matches Temporary cloud identity credential harvesting via Server-Side Request Forgery (SSRF); Unsupported End-of-Life (EOL) operating system on an unsegmented network matches Unmitigated exploit execution enabling rapid lateral movement.
Each host and network vulnerability corresponds to its specific operational impact: BMC management interfaces provide raw hardware control below the OS layer; cleartext SNMPv1 leaks management community strings; IMDS endpoints allow SSRF attacks to harvest temporary cloud security tokens; and unpatched EOL operating systems grant unmitigated exploit opportunities on flat networks.

Adım Adım Çözüm

1
Examine the scope and operational layer of each vulnerability listed on the left.
Identified physical out-of-band management controllers, unencrypted management protocols, cloud metadata endpoints, and legacy host operating systems.
Accurate risk classification requires analyzing where each component operates in the enterprise architecture.
2
Correlate out-of-band management (BMC) with low-level hardware risks.
BMCs control server hardware directly and bypass host OS security controls when compromised.
OOB hardware interfaces run dedicated firmware below the main operating system level.
3
Correlate legacy management protocols (SNMPv1) with network eavesdropping risks.
Cleartext transmission permits unauthorized traffic inspection and credential theft.
SNMPv1 does not provide packet encryption or cryptographic authentication.
4
Correlate cloud IMDS endpoints with web/application exploitation vectors.
IMDS exposes sensitive identity role credentials to local application calls, creating SSRF risks.
Cloud instance metadata services reply to unauthenticated HTTP GET requests from internal interfaces.
5
Correlate unsupported EOL operating systems with vulnerability exploitation risks.
Unpatched legacy platforms allow unmitigated exploit execution and rapid network propagation.
Vendors cease issuing security updates for EOL products, leaving known vulnerabilities open.

Anahtar Kavram

Host, Network, and Architecture Vulnerabilities
Bu soruyu puanla

Konular

Host, Network, and Architecture Vulnerabilities