Examkin

Soru

Zorluk: OrtaMitigation Strategies and Enterprise Hardening Practices

An enterprise security architect is updating host and network hardening standards across the organization to address findings from a recent security assessment. Match each enterprise security risk scenario on the left with the most effective enterprise hardening mitigation on the right.

  • Unauthenticated rogue hardware devices connecting directly to open Ethernet wall jacks in physical common areasImplement 802.1X Network Access Control (NAC) with dynamic VLAN assignment on switch ports
  • Kernel-level rootkits modifying boot loader components prior to operating system initializationEnable UEFI Secure Boot paired with Trusted Platform Module (TPM) Measured Boot
  • Compromised background daemon processes leveraging inherited root privileges to alter host system filesEnforce daemon process sandboxing and dedicated service accounts following least privilege
  • Cleartext directory service queries on internal subnets exposing user authentication tokens to packet sniffingEnforce mandatory LDAP Signing and LDAPS (LDAP over TLS) via group policy

Cevap

The enterprise security risk scenarios map directly to their corresponding technical mitigations: physical port access is secured by 802.1X NAC; system boot integrity is guaranteed by UEFI Secure Boot and TPM; daemon privilege escalation is mitigated by process sandboxing and least privilege; and unencrypted directory traffic is secured using LDAPS and LDAP signing.
Each hardening technique directly neutralizes the specified threat vector: 802.1X prevents unauthorized physical switch port connections; UEFI Secure Boot verifies pre-OS bootloader integrity; process sandboxing limits daemon privilege abuse; and LDAPS secures directory session traffic against passive eavesdropping.

Adım Adım Çözüm

1
Evaluate physical Layer 2 access control controls
Unauthorized physical network connections are effectively restricted by port authentication frameworks.
802.1X obligates connecting end-systems to authenticate via EAP before the access switch grants network connectivity.
2
Analyze system firmware and boot sequence protections
Pre-boot unauthorized code execution is neutralized by cryptographic verification.
UEFI Secure Boot checks signature chains of bootloaders and drivers, preventing low-level rootkit persistence.
3
Assess operating system process privilege limits
Host compromise scope is constrained by isolating daemon execution contexts.
Applying process sandboxing and dedicated least-privilege service accounts prevents compromised applications from acquiring root privileges.
4
Examine internal directory protocol transport security
Cleartext credential leakage across internal networks is resolved via cryptographic transport policies.
LDAPS wraps LDAP within TLS tunnels, while LDAP signing validates packet integrity to prevent adversary-in-the-middle sniffing.

Anahtar Kavram

Enterprise Hardening and Security Mitigation Controls
Bu soruyu puanla

Konular

Mitigation Strategies and Enterprise Hardening Practices

Bu konudan daha fazla soru