An organization is conducting a baseline security audit of its internal servers and infrastructure. Match each identified host or architecture vulnerability on the left with its corresponding primary risk on the right.
- Legacy / End-of-Life Operating SystemAbsence of vendor security patches, leaving known system flaws unmitigated.
- Open Unnecessary Network PortsUnintended expansion of the system attack surface to remote scanning.
- Default Factory CredentialsHigh susceptibility to initial unauthorized access using publicly known passwords.
- Unquoted Windows Service PathPotential for local privilege escalation through malicious binary placement.
Cevap
Legacy / End-of-Life Operating System pairs with absence of vendor security patches; Open Unnecessary Network Ports pairs with unintended expansion of the system attack surface; Default Factory Credentials pairs with high susceptibility to initial unauthorized access using publicly known passwords; Unquoted Windows Service Path pairs with potential for local privilege escalation.
Each host and infrastructure vulnerability directly correlates to its primary risk: unsupported operating systems suffer from a lack of vendor security patches, open ports expand the host network attack surface, default credentials enable trivial authentication bypass, and unquoted service paths enable local privilege escalation.
Adım Adım Çözüm
Anahtar Kavram
Host, Network, and Architecture Vulnerabilities