Examkin

Soru

Zorluk: KolayHost, Network, and Architecture Vulnerabilities

A security technician is preparing to deploy a new server host into an enterprise network. To reduce common host-based vulnerabilities and strengthen the system's baseline security posture, which of the following hardening actions should the technician implement? (Select TWO).

  1. Disable unnecessary network ports and unneeded background servicesCevap
  2. Change default vendor administrative passwords to strong, unique credentialsCevap
  3. C
    Deploy network-level IPsec encryption to mitigate Cross-Site Scripting (XSS) vulnerabilities
  4. D
    Configure host interfaces to implicitly trust all incoming traffic originating from internal network subnets
  5. E
    Reclassify technical endpoint security software as a physical security control

Cevap

Disabling unnecessary network ports and unneeded background services, and changing default vendor administrative passwords to strong, unique credentials.
Hardening host infrastructure requires reducing exposed entry points by closing unused network ports/services and enforcing proper credential management by removing default passwords.

Adım Adım Çözüm

1
Identify effective host-hardening practices that directly minimize host vulnerability.
Disabling unneeded ports/services minimizes entry points for potential exploits.
Host attack surface reduction is a foundational security baseline practice.
2
Evaluate default account configuration management on new systems.
Changing default credentials prevents known administrative password exploitation.
Default credentials are widely documented and actively targeted by malicious actors.

Anahtar Kavram

Host Hardening and Attack Surface Reduction
Bu soruyu puanla

Konular

Host, Network, and Architecture Vulnerabilities