Examkin

Soru

Zorluk: OrtaMitigation Strategies and Enterprise Hardening Practices

Match each enterprise system hardening practice to the specific security risk or operational vulnerability it is primarily designed to mitigate.

  • File Integrity Monitoring (FIM)Unauthorized modifications to core operating system binaries and configuration files
  • Host-based MicrosegmentationLateral movement between compromised workstation workloads on the same internal network segment
  • TPM-bound Disk EncryptionData exposure resulting from physical theft or unauthorized offline extraction of host storage drives
  • Automated Patch OrchestrationExploitation of unpatched software vulnerabilities across enterprise endpoints

Cevap

File Integrity Monitoring pairs with unauthorized modifications to system files; Host-based Microsegmentation pairs with lateral movement between workloads; TPM-bound Disk Encryption pairs with data exposure from physical drive theft; Automated Patch Orchestration pairs with exploitation of unpatched software vulnerabilities.
Matching each hardening control to its primary operational target ensures precise threat mitigation: File Integrity Monitoring detects unauthorized configuration or file changes; Host-based Microsegmentation prevents lateral movement across internal network workloads; TPM-bound Disk Encryption secures data against physical drive theft; and Automated Patch Orchestration eliminates software vulnerability exposure.

Adım Adım Çözüm

1
Analyze host security auditing controls.
File Integrity Monitoring (FIM) tracks alterations to system files and alerts on unauthorized changes.
FIM compares current file hashes against an established baseline to detect unexpected tampering.
2
Analyze network isolation controls.
Host-based microsegmentation limits east-west communication between internal systems.
Enforcing firewall and network access rules on individual host endpoints prevents lateral movement after an initial compromise.
3
Analyze physical and data-at-rest protection controls.
TPM-bound disk encryption protects stored data when system hardware is powered off or stolen.
Full disk encryption uses a Trusted Platform Module to verify system boot integrity before releasing decryption keys.
4
Analyze vulnerability mitigation practices.
Automated patch orchestration systematically remediates software defects and security flaws.
Deploying verified patches automatically minimizes the time window available for threat actors to execute exploits.

Anahtar Kavram

Enterprise Hardening Practices and Risk Mitigation
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Mitigation Strategies and Enterprise Hardening Practices

Bu konudan daha fazla soru