Examkin

Soru

Zorluk: Çok zorHost, Network, and Architecture Vulnerabilities

A security analyst is inspecting a critical legacy host after an automated vulnerability assessment flagged multiple high-severity findings. The scanner provided the following port audit report and service banner details:

PORT STATE SERVICE VERSION / NOTES
21/tcp OPEN ftp vsftpd 2.3.4 (CVE-2011-2523 confirmed exploitable)
23/tcp OPEN telnet Linux telnetd (Plaintext authentication enabled)
80/tcp OPEN http Apache httpd 2.2.15 ((CentOS) OS end-of-life)
443/tcp CLOSED https No TLS listener configured

Which of the following identifies the primary host and architecture root cause vulnerability exposing this server to immediate remote privilege escalation and credential compromise?

  1. Execution of end-of-life host software containing known backdoor vulnerabilities combined with active unencrypted cleartext management protocols.Cevap
  2. B
    Absence of a network-level perimeter firewall to block all inbound Telnet and FTP traffic between internal microsegmented subnets.
  3. C
    Failure to deploy a Web Application Firewall (WAF) to sanitize SQL injection and cross-site scripting payloads directed at port 80.
  4. D
    Lack of detective deception controls, such as a honeypot deployed on port 443, to divert potential attackers away from legacy services.

Cevap

Execution of end-of-life host software containing known backdoor vulnerabilities combined with active unencrypted cleartext management protocols.
The correct option accurately pinpointed the root cause of the host vulnerability: running an end-of-life service version (vsftpd 2.3.4) containing a known remote backdoor exploit alongside unencrypted legacy protocols (Telnet) that expose authentication credentials in cleartext.

Adım Adım Çözüm

1
Analyze the vulnerability scan log for specific service flags and CVEs.
Identified vsftpd 2.3.4 (CVE-2011-2523, a known malicious backdoor execution flaw), Telnet (unencrypted protocol), and Apache 2.2.15 (outdated/EOL web service).
Vulnerability assessment logs highlight active vulnerable services and insecure protocol implementations.
2
Evaluate the risk posed by host configuration flaws versus network control dependencies.
The host exposes remote code execution risks via unpatched host software and eavesdropping risks via cleartext transport.
Host security relies primarily on patching applications and removing legacy unencrypted daemons.
3
Determine the root cause underlying the vulnerability state.
The core issue is running unsupported/vulnerable host binaries and legacy cleartext management services.
Addressing host vulnerabilities requires remediating the unpatched/insecure host services directly.

Anahtar Kavram

Host and Infrastructure Vulnerabilities (Legacy Software & Cleartext Protocols)
Bu soruyu puanla

Konular

Host, Network, and Architecture Vulnerabilities