CNX-001 · Question #58
You are reviewing the configuration of a recently deployed intrusion prevention system (IPS). You must ensure that it follows hardened security practices. Which configurations should be validated?…
The correct answer is A. Disable remote administrative access over HTTP C. Integrate with centralized authentication (LDAP/RADIUS). Hardening an IPS means reducing its attack surface and enforcing strong access controls. (A) Disabling remote administrative access over HTTP is critical because HTTP transmits credentials and configuration data in plaintext, making it vulnerable to interception. Administrative…
Question
You are reviewing the configuration of a recently deployed intrusion prevention system (IPS). You must ensure that it follows hardened security practices. Which configurations should be validated? (Choose two.)
Options
- ADisable remote administrative access over HTTP
- BEnable default alert logging
- CIntegrate with centralized authentication (LDAP/RADIUS)
- DAllow anonymous read-only login
How the community answered
(49 responses)- A82% (40)
- B6% (3)
- D12% (6)
Explanation
Hardening an IPS means reducing its attack surface and enforcing strong access controls. (A) Disabling remote administrative access over HTTP is critical because HTTP transmits credentials and configuration data in plaintext, making it vulnerable to interception. Administrative access should use only encrypted protocols (HTTPS or SSH). (C) Integrating with centralized authentication (LDAP/RADIUS) enforces consistent identity management, enables multi-factor authentication, provides centralized audit logs, and prevents local account sprawl. (B) Enabling 'default' alert logging is vague and not a specific hardening action - logging should be explicitly configured and tuned. (D) Allowing anonymous read-only login is a security risk and violates the principle of least privilege, making it the opposite of a hardening practice.
Topics
Community Discussion
No community discussion yet for this question.