300-215 · Question #80
The company experienced a massive malware outbreak, which allowed attackers to gain access to trade secrets and other sensitive information. The security team conducted an in-depth analysis and…
The correct answer is D. Review and update all firewall rules and the network security policy. Since the breach stemmed from an overly permissive firewall rule, the priority is to comprehensively audit and tighten your firewall configurations and formalize those changes in your network security policy, ensuring no other unintended exceptions exist and preventing a
Question
The company experienced a massive malware outbreak, which allowed attackers to gain access to trade secrets and other sensitive information. The security team conducted an in-depth analysis and identified that a root cause of the incident was firewall misconfiguration that allowed a specific external IP address to connect to the SharePoint server. Which action should a security team take next?
Options
- AScan for and fix vulnerabilities on the firewall and server
- BHarden the SharePoint server
- CDisable external IP communications on all firewalls
- DReview and update all firewall rules and the network security policy
How the community answered
(53 responses)- A9% (5)
- B2% (1)
- C6% (3)
- D83% (44)
Explanation
Since the breach stemmed from an overly permissive firewall rule, the priority is to comprehensively audit and tighten your firewall configurations and formalize those changes in your network security policy, ensuring no other unintended exceptions exist and preventing a
Topics
Community Discussion
No community discussion yet for this question.