PT0-003 · Question #65
During an engagement, a penetration tester found some weaknesses that were common across the customer's entire environment. The weaknesses included the following: Weaker password settings than the com
The correct answer is B. Implement a configuration management system.. Identified Weaknesses: Weaker password settings than the company standard: Indicates inconsistency in password policies across systems. Systems without the company's endpoint security software installed: Suggests lack of uniformity in security software deployment. Operating syste
Question
During an engagement, a penetration tester found some weaknesses that were common across the customer's entire environment. The weaknesses included the following:
Weaker password settings than the company standard Systems without the company's endpoint security software installed Operating systems that were not updated by the patch management system Which of the following recommendations should the penetration tester provide to address the root issue?
Options
- AAdd all systems to the vulnerability management system.
- BImplement a configuration management system.
- CDeploy an endpoint detection and response system.
- DPatch the out-of-date operating systems.
How the community answered
(53 responses)- A15% (8)
- B57% (30)
- C23% (12)
- D6% (3)
Explanation
Identified Weaknesses: Weaker password settings than the company standard: Indicates inconsistency in password policies across systems. Systems without the company's endpoint security software installed: Suggests lack of uniformity in security software deployment. Operating systems not updated by the patch management system: Points to gaps in patch management processes. Configuration Management System: Definition: A configuration management system automates the deployment, maintenance, and enforcement of configurations across all systems in an organization. Benefits: Ensures consistency in security settings, software installations, and patch management across the entire environment. Examples: Tools like Ansible, Puppet, and Chef can help automate and manage configurations, ensuring compliance with organizational standards.
Topics
Community Discussion
No community discussion yet for this question.