MENU
A malware outbreak revealed that a firewall was misconfigured, allowing external access to the SharePoint server. What should the security team do next?
Suggested Answer: D
Get Premium 300-215 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The incident stems from a policy-level issue rather than a technical vulnerability. According to incident response best practices, the priority should be to review and update firewall rules and ensure that the network security policy aligns with the principle of least privilege and correct access segmentation.
24 comments · newest first
AN
An
2 days ago
But we can't ignore hardening the server. Option B is important.
JI
Jill
7 days ago
Option A makes sense too. Fixing vulnerabilities is a must.
EF
Effie
12 days ago
Agreed! Updating the security policy is key.
CA
Carissa
17 days ago
I think option D is crucial. We need to review all rules.
FL
Florinda
22 days ago
A combination of A and D seems best. Fix and review!
AP
Apolonia
27 days ago
Disabling external IPs sounds extreme. Option C might not be necessary.
CH
Chun
1 month ago
I feel like hardening the server is a good step too. Option B.
DW
Dwight
1 month ago
Option A is also important. We must fix vulnerabilities first.
DA
Dawne
1 month ago
Agreed! Updating the network policy is key.
MA
Margo
2 months ago
I think option D is crucial. We need to review all rules.
LA
Laurel
2 months ago
Wait, how did the firewall get misconfigured in the first place?
MA
Marci
2 months ago
Reviewing firewall rules is a must, can't overlook that.
DE
Deane
2 months ago
Disabling all external IP communications? That seems extreme!
RH
Rhea
2 months ago
I think hardening the SharePoint server is crucial too.
CA
Carry
2 months ago
Definitely need to scan and fix vulnerabilities first.
RO
Rolland
3 months ago
I’m surprised the firewall was misconfigured in the first place.
FE
Fernanda
3 months ago
Reviewing and updating firewall rules is a must!
CA
Catalina
3 months ago
Wait, disabling all external IP communications? That seems extreme.
BU
Buck
3 months ago
I think hardening the SharePoint server is also crucial.
VI
Virgie
3 months ago
Definitely need to scan and fix vulnerabilities first.
RO
Rodrigo
3 months ago
Disabling external IP communications sounds drastic. I guess it could be a temporary measure, but it might not solve the underlying issue with the firewall configuration.
MA
Martina
4 months ago
I practiced a question like this, and I feel like scanning for vulnerabilities is essential, but I wonder if we should prioritize the firewall rules first?
DY
Dylan
4 months ago
I'm not entirely sure, but I remember something about hardening the server being important too. Maybe that should be done alongside the firewall review?
ZO
Zona
5 months ago
I think we should definitely review and update all firewall rules first. That seems like a critical step to prevent further breaches.