A Penetration Tester Was Able to Retrieve the Initial VPN

question 126

Multiple Choice

A penetration tester was able to retrieve the initial VPN user domain credentials by phishing a member of the IT department. Afterward, the penetration tester obtained hashes over the VPN and easily cracked them using a dictionary attack. Which of the following remediation steps should be recommended? (Select THREE) .

• A) Mandate all employees take security awareness training.
• B) Implement two-factor authentication for remote access.
• C) Install an intrusion prevention system.
• D) Increase password complexity requirements.
• E) Install a security information event monitoring solution.
• F) Prevent members of the IT department from interactively logging in as administrators.
• G) Upgrade the cipher suite used for the VPN solution.

---

Definitions:

Predict

To declare or indicate a probable event or outcome in the future, often based on data analysis or patterns.

Influential Points

Data points in a statistical analysis that have a significant impact on the result of a regression or other statistical model.

Labeled Points

Labeled points refer to data points in a dataset that have been tagged with one or more labels indicating their classification or properties.

Data

Information collected for reference or analysis, often numeric, and used for decision-making or research.