A Security Assessor Completed a Comprehensive Penetration Test of a Company

question 31

Multiple Choice

A security assessor completed a comprehensive penetration test of a company and its networks and systems. During the assessment, the tester identified a vulnerability in the crypto library used for TLS on the company's intranet-wide payroll web application. However, the vulnerability has not yet been patched by the vendor, although a patch is expected within days. Which of the following strategies would BEST mitigate the risk of impact?

• A) Modify the web server crypto configuration to use a stronger cipher-suite for encryption, hashing, and digital signing.
• B) Implement new training to be aware of the risks in accessing the application. This training can be decommissioned after the vulnerability is patched.
• C) Implement an ACL to restrict access to the application exclusively to the finance department. Reopen the application to company staff after the vulnerability is patched.
• D) Require payroll users to change the passwords used to authenticate to the application. Following the patching of the vulnerability, implement another required password change.

---

Definitions:

Nerve Growth Factor

Nerve growth factor is a protein essential for the growth, maintenance, and survival of certain neurons in the peripheral and central nervous system.

EGF

Epidermal Growth Factor (EGF) is a protein that stimulates cell growth, proliferation, and differentiation by binding to its receptor, EGFR.

Subventricular Zone

Lining of neural stem cells surrounding the ventricles in adults.

Primitive Map

A basic organizational layout or representation within the brain or nervous system that underlies the more complex structures and functions.