312-49 · Question #344
Click on the Exhibit Button Paulette works for an IT security consulting company that is currently performing an audit for the firm ACE Unlimited. Paulette's duties include logging on to all the…
The correct answer is D. Remove any identifying numbers, names, or version information. Security best practice dictates that network device login banners (MOTD/login banners) must NOT reveal identifying information such as device names, IOS/firmware version numbers, model numbers, or network topology details. Attackers can use this information to fingerprint…
Question
Click on the Exhibit Button Paulette works for an IT security consulting company that is currently performing an audit for the firm ACE Unlimited. Paulette's duties include logging on to all the company's network equipment to ensure IOS versions are up-to-date and all the other security settings are as stringent as possible. Paulette presents the following screenshot to her boss so he can inform the client about necessary changes need to be made. From the screenshot, what changes should the client company make?
Options
- AThe banner should include the Cisco tech support contact information as well
- BThe banner should have more detail on the version numbers for the networkeQuipment
- CThe banner should not state "only authorized IT personnel may proceed"
- DRemove any identifying numbers, names, or version information
How the community answered
(23 responses)- A4% (1)
- B13% (3)
- C4% (1)
- D78% (18)
Explanation
Security best practice dictates that network device login banners (MOTD/login banners) must NOT reveal identifying information such as device names, IOS/firmware version numbers, model numbers, or network topology details. Attackers can use this information to fingerprint devices and identify known vulnerabilities to exploit. The banner should only contain a legal warning about unauthorized access. Options A and B suggest adding more detail - the opposite of what security requires. Option C is wrong; warning unauthorized users is legally recommended.
Topics
Community Discussion
No community discussion yet for this question.