nerdexam
GAQM

CPEH-001 · Question #802

A regional bank hires your company to perform a security assessment on their network after a recent data breach. The attacker was able to steal financial data from the bank by compromising only a…

The correct answer is A. Place a front-end web server in a demilitarized zone that only handles external web traffic. See the full explanation below for the reasoning.

Question

A regional bank hires your company to perform a security assessment on their network after a recent data breach. The attacker was able to steal financial data from the bank by compromising only a single server. Based on this information, what should be one of your key recommendations to the bank?

Options

  • APlace a front-end web server in a demilitarized zone that only handles external web traffic
  • BRequire all employees to change their anti-virus program with a new one
  • CMove the financial data to another server on the same IP subnet
  • DIssue new certificates to the web servers from the root certificate authority

How the community answered

(27 responses)
  • A
    74% (20)
  • B
    15% (4)
  • C
    4% (1)
  • D
    7% (2)

Community Discussion

No community discussion yet for this question.

Full CPEH-001 Practice