GCIH · Question #120
John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux- based network. The company is aware of various types of security attacks and wants to impede them. Hence…
The correct answer is D. Audit policy. Proactively port scanning company servers to identify open ports and assess exposure is a security auditing activity governed by an audit policy.
Question
John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux- based network. The company is aware of various types of security attacks and wants to impede them. Hence, management has assigned John a project to port scan the company's Web Server. For this, he uses the nmap port scanner and issues the following command to perform idle port scanning:
nmap -PN -p- -sI IP_Address_of_Company_Server He analyzes that the server's TCP ports 21, 25, 80, and 111 are open. Which of the following security policies is the company using during this entire process to mitigate the risk of hacking attacks?
Options
- ANon-disclosure agreement
- BAntivirus policy
- CAcceptable use policy
- DAudit policy
How the community answered
(23 responses)- A4% (1)
- B4% (1)
- C9% (2)
- D83% (19)
Why each option
Proactively port scanning company servers to identify open ports and assess exposure is a security auditing activity governed by an audit policy.
A non-disclosure agreement is a legal contract protecting confidential information from being shared with third parties, and does not govern how security assessments are performed.
An antivirus policy defines requirements for malware detection and prevention software on endpoints, not for network-level port scanning or security audits.
An acceptable use policy specifies how employees may use company IT resources, and does not cover security testing procedures conducted by administrators.
An audit policy establishes the rules and procedures for periodically examining and testing systems to verify their security posture, including activities like port scanning and vulnerability assessment. Assigning John to scan the web server with nmap and review open ports falls squarely within the scope of an audit policy, which is specifically designed to detect and mitigate security risks through systematic review.
Concept tested: Security audit policy and nmap idle scanning
Source: https://www.sans.org/information-security-policy/audit-policy/
Topics
Community Discussion
No community discussion yet for this question.