A systems administrator configures a new application. The next day, a security analyst reviews the logs and identifies multiple accounts that had been created overnight with administrative privileges and connections from different countries. Which of the following solutions would have prevented this incident?
Changing the default credentials would have prevented this incident.
Using default credentials is a common security vulnerability that allows unauthorized access to systems. By changing these credentials to unique, strong passwords, the risks of unauthorized account creation and access are significantly reduced, thereby preventing incidents like the one described.
Input validation is a technique used to ensure that data entered into a system meets specific criteria, preventing attacks such as SQL injection or cross-site scripting. However, while it enhances security against data manipulation, it does not directly address issues related to unauthorized account creation or the misuse of administrative privileges.
Default credentials are often well-known and can be exploited by attackers to gain unauthorized access to systems. By changing these credentials to strong, unique passwords, the likelihood of unauthorized account creation with administrative privileges is minimized, making this the most effective solution to prevent the incident described.
A honeynet is a network set up to attract and trap potential attackers to study their methods or distract them from real targets. While it can enhance security awareness and threat detection, it does not prevent unauthorized account creation; thus, it would not address the immediate issue of multiple accounts being created with administrative privileges.
A Web Application Firewall (WAF) protects web applications by filtering and monitoring HTTP traffic. While it can defend against certain types of attacks, it does not specifically prevent unauthorized account creation or address the issue of administrative privilege misuse, making it less applicable in this scenario.
To prevent unauthorized account creation with administrative privileges, changing default credentials is essential. This step protects against exploitation by ensuring that attackers cannot easily access and manipulate system settings. Other options, while beneficial in enhancing overall security, do not directly mitigate the specific vulnerabilities that led to the incident.
Related Questions
View allAn unknown source has attacked an organization's network multiple time...
An organization wants to hire a third-party company to perform a vulne...
An administrator investigating an incident is concerned about the down...
A Chief Information Security Officer is developing procedures to guide...
A group of developers has a shared backup account to access the source...
Related Quizzes
View allCompTIA A Plus Certification Exam
CompTIA A Plus Exam Questions
CompTIA A Plus 1001 Exams Practice
CompTIA A Plus Practice Exam
CompTIA CySA+ Cybersecurity Analyst Certification all in One Exam Guide
CompTIA Network Plus Certification Exam Quiz
CompTIA Security Plus Exam Answers
CompTIA Security Plus Simulation Questions
CompTIA Security Plus 501 Practice Questions
CompTIA Security Plus Example Questions
- ✓ 500+ Practice Questions
- ✓ Detailed Explanations
- ✓ Progress Analytics
- ✓ Exam Simulations