Exam PT0-002 topic 1 question 233 discussion

Easy question. From Wiki: EternalBlue is a computer exploit developed by the U.S. National Security Agency. It was leaked by the Shadow Brokers hacker group on April 14, 2017, one month after Microsoft released patches for the vulnerability. On May 12, 2017, the worldwide WannaCry ransomware used this exploit to attack unpatched computers

D is the answer Patch management is the process of identifying, downloading, and installing security patches for a system in order to address new vulnerabilities and software exploits. In the case of EternalBlue, the vulnerability was addressed by Microsoft in the form of a security patch. Installing this patch on the vulnerable host will provide protection from the vulnerability. Additionally, organizations should implement a patch management program to regularly check for and install security patches for the systems in their environment. Network segmentation (A) can limit the impact of a compromise by separating different parts of the network into smaller, more isolated segments. However, it does not address the vulnerability itself. Key rotation (B) is the process of periodically changing cryptographic keys, which can help protect against attacks that rely on stolen or compromised keys. However, it is not directly related to the EternalBlue vulnerability. Encrypted passwords (C) can help protect user credentials in case of a data breach or other compromise, but it does not prevent attackers from exploiting the EternalBlue vulnerability

EternalBlue exploits a server message block (SMB) vulnerability resulting in remote code execution, allowing the attacker to gain access to the target system. It is important to patch vulnerable systems and practice good cyber security hygiene to protect against this type of attack.

The best way to protect against the EternalBlue vulnerability is to implement patch management. EternalBlue is a vulnerability in the Microsoft Windows SMB protocol that was exploited by the WannaCry ransomware in 2017.

Share your answer to other new questions also

D is correct answer

D is correct as a patch is needed for Windows SMB