Exam N10-008 topic 1 question 681 discussion

Actual exam question from CompTIA's N10-008

Question #: 681
Topic #: 1

A network administrator is implementing process changes based on recommendations following a recent penetration test. The testers used a method to gain access to the network that involved exploiting a publicly available and fixed remote code execution vulnerability in the VPN appliance. Which of the following should the administrator do to BEST prevent this from happening again?

A. Change default passwords on internet-facing hardware.
B. Implement robust ACLs with explicit deny-all entries.
C. Create private VLANs for management plane traffic.
D. Routinely upgrade all network equipment firmware.

Show Suggested Answer

Suggested Answer: D 🗳️

by Pisces225 at Feb. 6, 2024, 5:52 p.m.

Comments

Submit Cancel

subaie503

8 months, 3 weeks ago

Selected Answer: D

D. Routinely upgrade all network equipment firmware. The penetration testers gained access by exploiting a known and fixed remote code execution vulnerability in the VPN appliance. The best preventive measure to avoid such incidents in the future is to routinely upgrade all network equipment firmware. Regularly updating firmware ensures that vulnerabilities, especially those that have been publicly disclosed and for which fixes are available, are patched. This reduces the attack surface and protects against known exploits.

upvoted 2 times

...

Pisces225

10 months ago

Selected Answer: D

Firmware upgrades patch known vulnerabilities and exploits.

upvoted 2 times

...