CS0-003 · Question #207
A company is deploying new vulnerability scanning software to assess its systems. The current network is highly segmented, and the networking team wants to minimize the number of unique firewall…
The correct answer is A. Deploy agents on all systems to perform the scans. USB ports are a common attack vector that can be used to deliver malware, steal data, or compromise systems. The first step to mitigate this vulnerability is to check the configurations of the company assets and disable or restrict the USB ports if possible. This will prevent…
Question
A company is deploying new vulnerability scanning software to assess its systems. The current network is highly segmented, and the networking team wants to minimize the number of unique firewall rules. Which of the following scanning techniques would be most efficient to achieve the objective?
Options
- ADeploy agents on all systems to perform the scans
- BDeploy a central scanner and perform non-credentialed scans
- CDeploy a cloud-based scanner and perform a network scan
- DDeploy a scanner sensor on every segment and perform credentialed scans
How the community answered
(24 responses)- A79% (19)
- C8% (2)
- D13% (3)
Explanation
USB ports are a common attack vector that can be used to deliver malware, steal data, or compromise systems. The first step to mitigate this vulnerability is to check the configurations of the company assets and disable or restrict the USB ports if possible. This will prevent unauthorized devices from being connected and reduce the attack surface. The other options are also important, but they are not the first priority in this scenario.
Topics
Community Discussion
No community discussion yet for this question.