Exam CS0-003 topic 1 question 78 discussion

Can't remember the answer? Just picture a goat

This one caught me for a second. I was thinking the network segment that was internal would be higher prioritized. However an external facing server (meaning a server that is accessible to the public like a webserver) would be more easily accessible to an attacker than a server that an attacker would have to get into the internal network first.

Remote code execution on an public facing system can lead to that host becoming a foothold in the network for the attacker to launch further attacks from. First system to patch should be brady.

More info on segmentation............... Types of network segmentation Physical segmentation uses dedicated hardware to build segments. While physical segmentation is the most secure method, it is also the most difficult to manage. Also known as perimeter-based segmentation, each segment needs its own internet connection, physical wiring and firewall. This type of segmentation operates on trust, in which anything internal is trusted and anything external is not. There are few restrictions on internal resources, which commonly operate over a flat network with minimal internal network segmentation.

Should it not be brees? brees is located in an internal part of the network, which can now effectively be accessed by an external threat thanks to the Remote Code Execution nature of the vulnerability, meaning the system is now an Insider Threat I am thus voting for C

B) Brady Between A) rogers and B) Brady. I'm going with Brady since it's external facing whereas Rogers may have both vulnerabilities, but it's in its own isolated VLAN, so it's well-contained already.

Since Rogers is isolated in a VLAN network, this option is ruled out. Of the remaining options, I believe brady would have the greatest impact on the system.