A Penetration Tester Was Able to Connect to a Company's

question 1161

Multiple Choice

A penetration tester was able to connect to a company's internal network and perform scans and staged attacks for the duration of the testing period without being noticed. The SIEM did not alert the security team to the presence of the penetration tester's devices on the network. Which of the following would provide the security team with notification in a timely manner?

• A) Implement rogue system detection and sensors
• B) Create a trigger on the IPS and alert the security team when unsuccessful logins occur
• C) Decrease the correlation threshold for alerts on the SIEM
• D) Run a credentialed vulnerability scan

---

Definitions:

Technology Advantages

The benefits that businesses gain from utilizing modern technology, such as increased efficiency, improved communication, and enhanced data analysis.

RFID Tags

Small electronic devices that use radio frequency identification to track and identify objects.

Retail Stores

Physical locations where consumers can purchase goods and services directly from a seller in person.

Inventory

Items or stock held by a business for the purpose of resale or production, including raw materials, work-in-progress, and finished goods.