A Penetration Tester Was Able to Retrieve the Initial VPN

question 126

Multiple Choice

A penetration tester was able to retrieve the initial VPN user domain credentials by phishing a member of the IT department. Afterward, the penetration tester obtained hashes over the VPN and easily cracked them using a dictionary attack. Which of the following remediation steps should be recommended? (Select THREE) .

• A) Mandate all employees take security awareness training.
• B) Implement two-factor authentication for remote access.
• C) Install an intrusion prevention system.
• D) Increase password complexity requirements.
• E) Install a security information event monitoring solution.
• F) Prevent members of the IT department from interactively logging in as administrators.
• G) Upgrade the cipher suite used for the VPN solution.

---

Definitions:

Heritability

A measure of how much genetic factors contribute to individual differences in a trait within a population.

Cross-Sectional

A type of observational study that analyzes data collected from a population, or a representative subset, at a specific point in time.

Longitudinal

A type of study or analysis where data is collected over a long period of time to observe changes in the subjects or phenomena being studied.

Sequential Designs

Research designs utilizing successive observations or experiments, allowing for the study of changes over time and the effects of earlier events on later outcomes.