SIMULATION You are a cybersecurity analyst tasked with interpreting scan data from Company A's servers. You must verify the requirements are being met for all of the servers and recommend changes if y

Submitted by yousef_jo· Mar 6, 2026CompTIA Security+ Domain 4: Operations and Incident Response - specifically hardening techniques, configuration management, and interpreting scan results to ensure systems meet security baselines and compliance requirements.

Question

SIMULATION You are a cybersecurity analyst tasked with interpreting scan data from Company A's servers. You must verify the requirements are being met for all of the servers and recommend changes if you find they are not. The company's hardening guidelines indicate the following:

TLS 1.2 is the only version of TLS running.
Apache 2.4.18 or greater should be used.
Only default ports should be used.

INSTRUCTIONS Using the supplied data, record the status of compliance with the company's guidelines for each server. The question contains two parts: make sure you complete Part 1 and Part 2. Make recommendations for issues based ONLY on the hardening guidelines provided. Answer:

Part 1 Answer:

Check on the following:

AppServ1 is only using TLS.1.2 AppServ4 is only using TLS.1.2 AppServ1 is using Apache 2.4.18 or greater AppServ3 is using Apache 2.4.18 or greater AppServ4 is using Apache 2.4.18 or greater Part 2 answer:

Recommendations

disable TLS v1.1 on AppServ2 and AppServ3 OR configure HTTPD Security service on both

AppServ2 & AppServ3 to strictly use TLS 1.2

upgrade AppServ2 Apache to version 2.4.48 from its current version of 2.3.48
Move ssh service port to port 22 on AppServ4

Exhibits

Explanation

The correct answer identifies all servers that are non-compliant with the three hardening guidelines by cross-referencing scan data against each requirement. AppServ2 and AppServ3 are flagged for running TLS 1.1 in addition to TLS 1.2 (violating the 'only TLS 1.2' rule), while AppServ1, AppServ3, and AppServ4 are flagged for running Apache versions below 2.4.18. The recommendations correctly target only the specific violations found in the scan data - disabling TLS 1.1 on non-compliant servers and upgrading Apache where versions are outdated - without introducing changes beyond what the guidelines require.

Topics

#Server Hardening#TLS Configuration#Vulnerability Scanning#Compliance Assessment

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice