During an internal security audit, an administrator identifies two host vulnerabilities on an enterprise web server: an unauthenticated REST API endpoint susceptible to directory traversal, and legacy SMB services accepting anonymous NULL session connections. Which TWO of the following remediation measures should the administrator implement to directly resolve these host and architecture vulnerabilities?
- Apply software patches to enforce strict input sanitization and path validation on API parameters.Cevap
- Disable legacy NULL session capabilities within the host operating system security configuration.Cevap
- CDeploy an edge web application firewall (WAF) while leaving the internal host and API code unmodified.
- DConfigure network routers to drop all ICMP Echo Request packets directed at the host subnet.
- EReclassify the physical network interface card as a detective security control in the enterprise asset management system.
Cevap
The administrator must apply software patches for input sanitization and path validation, and disable legacy NULL sessions in the host operating system configuration.
Remediating host and architecture flaws requires addressing the root causes directly on the host system: validating and sanitizing API path inputs stops directory traversal, and hardening the host OS configuration by disabling NULL sessions prevents anonymous share and user enumeration.
Adım Adım Çözüm
Anahtar Kavram
Host Hardening and Vulnerability Remediation