The Results of an External Penetration Test for a Software

question 90

Multiple Choice

The results of an external penetration test for a software development company show a small number of applications account for the largest number of findings. While analyzing the content and purpose of the applications, the following matrix is created: The findings are then categorized according to the following chart: Which of the following would BEST reduce the amount of immediate risk incurred by the organization from a compliance and legal standpoint? (Choose two.)

• A) Place a WAF in line with Application 2
• B) Move Application 3 to a secure VLAN and require employees to use a jump server for access
• C) Apply the missing OS and software patches to the server hosting Application 4
• D) Use network segmentation and ACLs to control access to Application 5
• E) Implement an IDS/IPS on the same network segment as Application 3
• F) Install a FIM on the server hosting Application 4
• G) Enforce Group Policy password complexity rules on the server hosting Application 1

---

Definitions:

Girls And Math

An observed phenomenon addressing the gender disparities in mathematics performance and participation between girls and boys.

Social Influences

The effects that the words, actions, or presence of other people have on our thoughts, feelings, attitudes, or behaviors.

Physical Aggression

Behaviors that involve physical force intended to hurt, damage, or kill someone or something.

Spatial Ability

The ability to comprehend, think logically, and recall the spatial connections between objects or areas.