A Security Analyst Is Doing a Vulnerability Assessment on a Database

question 214

Multiple Choice

A security analyst is doing a vulnerability assessment on a database server. A scanning tool returns the following information: There have been several security breaches on the web server that accesses this database. The security team is instructed to mitigate the impact of any possible breaches. The security team is also instructed to improve the security on this database by making it less vulnerable to offline attacks. Which of the following would BEST accomplish these goals? (Choose two.)

• A) Start using salts to generate MD5 password hashes
• B) Generate password hashes using SHA-256
• C) Force users to change passwords the next time they log on
• D) Limit users to five attempted logons before they are locked out
• E) Require the web server to only use TLS 1.2 encryption

---

Definitions:

Robbery

Robbery is the act of taking property unlawfully from a person or place by force or threat of force.

Burglary

The unlawful entry into a building or other premises with the intent to commit theft or any other felony.

Fourth Amendment Protections

Constitutional safeguards that protect individuals against unreasonable searches and seizures by the government.

Search Warrant

A court order that authorizes law enforcement agents to search for or seize items specifically described in the warrant.