Question 221

You are a cybersecurity analyst tasked with interpreting scan data from Company A's servers. You must verify the requirements are being met for all of the servers and recommend changes if you find they are not.
The company's hardening guidelines indicate the following:
* TLS 1.2 is the only version of TLS running.
* Apache 2.4.18 or greater should be used.
* Only default ports should be used.
INSTRUCTIONS
Using the supplied data, record the status of compliance with the company's guidelines for each server.
The question contains two parts: make sure you complete Part 1 and Part 2. Make recommendations for issues based ONLY on the hardening guidelines provided.




Question 222

A system administrator is doing network reconnaissance of a company's external network to determine the vulnerability of various services that are running. Sending some sample traffic to the external host, the administrator obtains the following packet capture:

Based on the output, which of the following services should be further tested for vulnerabilities?
  • Question 223

    When network administrators observe an increased amount of web traffic without an increased number of financial transactions, the company is MOST likely experiencing which of the following attacks?
  • Question 224

    A vulnerability scan has returned the following information:

    Which of the following describes the meaning of these results?
  • Question 225

    A security analyst has received reports of very slow, intermittent access to a public-facing corporate server.
    Suspecting the system may be compromised, the analyst runs the following commands:

    Based on the output from the above commands, which of the following should the analyst do NEXT to further the investigation?