A Penetration Tester Recently Completed a Review of the Security

question 28

Multiple Choice

A penetration tester recently completed a review of the security of a core network device within a corporate environment. The key findings are as follows: • The following request was intercepted going to the network device: GET /login HTTP/1.1 Host: 10.50.100.16 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Authorization: Basic WU9VUilOQU1FOnNlY3JldHBhc3N3b3jk • Network management interfaces are available on the production network. • An Nmap scan returned the following: Which of the following would be BEST to add to the recommendations section of the final report? (Choose two.)

• A) Enforce enhanced password complexity requirements.
• B) Disable or upgrade SSH daemon.
• C) Disable HTTP/301 redirect configuration.
• D) Create an out-of-band network for management.
• E) Implement a better method for authentication.
• F) Eliminate network management and control interfaces.

---

Definitions:

Self-directed Work Teams

Teams composed of members who work together on a task with minimal direct supervision, managing their own processes and tasks.

Firm Performance

A measure of how well a company is achieving its financial and operational goals, often assessed through metrics like profitability, revenue growth, and market share.

HRM Practice

Human Resource Management practices involve strategies, policies, and systems that manage people within an organization's work environment.

Pay Secrecy

The practice of discouraging or prohibiting employees from discussing their salaries with coworkers.