A penetration tester conducted a reconnaissance exercise to gather information about a target organization. The tester discovered the following: 1. The organization's external-facing web server has…

Question

Options

• BThe open port 22 on the web server poses a risk of unauthorized access.
• CThe CEO's active social media presence could lead to social engineering attacks targeting the
• DThe use of a cloud-based file-sharing service may result in the inadvertent exposure or

• B
  18% (4)
• C
  27% (6)
• D
  55% (12)

Explanation

Among the listed risks, the use of an unmanaged cloud-based file-sharing service presents the greatest risk to sensitive data. Employees using such a service outside the organization's control - Data leakage: Sensitive company information may be exposed if proper access controls are not - Unauthorized access: If the cloud service lacks strong authentication or encryption, external parties could gain access to confidential documents. - Compliance violations: Depending on the industry, storing sensitive data on unauthorized platforms can lead to regulatory issues.

No community discussion yet for this question.