MENU
Refer to the exhibit.
After a cyber attack, an engineer is analyzing an alert that was missed on the intrusion detection system. The attack exploited a vulnerability in a business critical, web-based application and violated its availability. Which two migration techniques should the engineer recommend? (Choose two.)
Suggested Answer: C, E
Get Premium 300-215 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
25 comments · newest first
GE
Gene
11 months ago
Encapsulation could help, but is it really effective against all attacks?
DO
Dorsey
11 months ago
I’m surprised they didn’t mention heap-based security!
SH
Shawnda
11 months ago
NOP sled technique? Really? That seems outdated.
JA
Jaime
11 months ago
Definitely agree, data execution prevention is a must too!
TO
Toshia
12 months ago
I think address space randomization is a solid choice.
AS
Ashton
12 months ago
I'm a bit confused about heap-based security. I recall it being important, but I can't remember how it directly relates to availability issues.
RO
Ronna
1 year ago
I practiced a similar question where data execution prevention was highlighted as a key technique. I feel confident about that one!
GL
Glennis
1 year ago
I think address space randomization could be a good option since it helps prevent certain types of attacks, but I need to double-check its effectiveness in this context.
JE
Jenifer
1 year ago
I remember studying about encapsulation and its role in securing applications, but I'm not entirely sure if it's the best choice here.
BO
Bok
1 year ago
I'm a bit confused by the options. Encapsulation and NOP sled technique don't seem directly relevant to the issue of a web app vulnerability. I'll need to review my notes on security migration techniques to make sure I pick the best two for this scenario.
DO
Domitila
1 year ago
Okay, let's see. Address space randomization and data execution prevention seem like good options to improve security and prevent similar attacks in the future. I'll go with those two.
VI
Viva
1 year ago
Hmm, I'm a bit unsure about this one. There are a lot of options and I'm not totally familiar with all the migration techniques. I'll need to think carefully about which two would be most relevant to the scenario.
CE
Cecily
1 year ago
This question seems pretty straightforward. I'll focus on the key details - the attack exploited a vulnerability in a web-based application and violated its availability. That suggests I should look for migration techniques that improve application security and availability.
NI
Nickie
1 year ago
The control plane running in the HPE cloud is an interesting point, that could provide the scalability needed for IoT. I'll have to weigh the pros and cons of each option.
GR
Gregoria
2 years ago
I believe data execution prevention could also be a good migration technique to recommend.
TY
Tyra
2 years ago
I agree with Michael, address space randomization can help prevent similar attacks in the future.
KR
Kristian
2 years ago
I'm going with C and E. Anything to keep those pesky hackers at bay, am I right? Though I do wonder if the engineer's sense of humor needs a little work.
CH
Chandra
2 years ago
Definitely, can't be too careful when it comes to cybersecurity.
MA
Markus
2 years ago
I think C and E are good choices. Better safe than sorry.
SH
Shawn
2 years ago
Definitely C and E. Heap-based security? Really? That's like trying to put out a fire with a garden hose.
ZA
Zachary
2 years ago
C'mon, address space randomization? That's a no-brainer! The real question is, who thought NOP sled technique was a viable option here?
IS
Isaiah
2 years ago
Maybe they were trying to think outside the box, but it doesn't seem like the best option here.
AM
Ammie
2 years ago
I know right, NOP sled technique seems like a strange choice for this scenario.
ST
Stevie
2 years ago
I agree, address space randomization is a must in this situation.
MI
Michael
2 years ago
I think we should consider address space randomization for migration.