CAS-005 Question #132: Real Exam Question with Answer & Explanation

Question

SIMULATION A security engineer needs to review the configurations of several devices on the network to meet the following requirements: - The PostgreSQL server must only allow connectivity in the 10.1.2.0/24 subnet. - The SSH daemon on the database server must be configured to listen to port 4022. - The SSH daemon must only accept connections from a single workstation. - All host-based firewalls must be disabled on all workstations. - All devices must have the latest updates from within the past eight days. - All HDDs must be configured to secure data at rest. - Cleartext services are not allowed. - All devices must be hardened when possible. INSTRUCTIONS Click on the various workstations and network devices to review the posture assessment results. Remediate any possible issues or indicate that no issue is found. Click on Server A to review output data. Select commands in the appropriate tab to remediate connectivity problems to the PostgreSQL database via SSH. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button. Answer: