MENU
An Internet retailer's database was recently exploited by a foreign criminal organization via a remote attack. The initial exploit resulted in immediate root-level access. What could have been done to prevent this level of access being given to the intruder upon successful exploitation?
Suggested Answer: C
Get Premium GCCC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
41 comments · newest first
GE
Georgeanna
10 months ago
Blocking unnecessary services is crucial too!
BR
Brice
11 months ago
Wait, how did they even get root access in the first place?
WI
William
11 months ago
I thought anti-virus was enough, but maybe not?
JA
Jame
11 months ago
Totally agree, D is the way to go.
CH
Cherri
11 months ago
Lowering database privileges is a must!
EL
Eleonore
11 months ago
I feel like updated anti-virus software is important, but I'm not sure it would have stopped a remote attack that gained root access. Option C might not be the best choice here.
BE
Bernadine
12 months ago
I practiced a question similar to this, and I think host integrity monitoring could help detect intrusions early. But I'm not convinced it's a complete solution like option D.
CL
Claribel
12 months ago
I'm not entirely sure, but I think blocking unnecessary services with a firewall could reduce attack vectors. Maybe option A is relevant here?
FE
Felicidad
12 months ago
I remember discussing the importance of running services with the least privilege principle. It seems like option D could really help prevent root access.
MA
Markus
12 months ago
Configuring the DMZ firewall to block unnecessary services seems like the most straightforward solution here. I'll make sure to explain my reasoning clearly.
EL
Elfrieda
12 months ago
Okay, I've got a strategy for this. I think configuring the database to run with lower privileges is the key to preventing this level of access.
BR
Brett
12 months ago
Hmm, I'm a bit unsure about this. I'll need to review the material on network security and database configurations to make sure I understand the best approach.
CA
Candida
1 year ago
This is a tricky one. I'll need to think carefully about the different security measures that could have prevented the intruder from gaining root-level access.
JE
Jesus
1 year ago
I'm feeling pretty confident about this one. Installing host integrity monitoring software would have been a great way to detect and prevent the initial exploit.
JI
Jillian
1 year ago
The national radio campaign sounds like an expensive option that might not be the best fit for a small club. I'm leaning more towards the one-month free trial or the refer-a-friend scheme - those seem like good ways to get new members in the door.
CO
Corrie
1 year ago
Gotta love it when the 'experts' leave the database wide open for the bad guys. D all the way!
OW
Owen
1 year ago
C) Install updated anti-virus software
CO
Cortney
1 year ago
B) Install host integrity monitoring software
TA
Tarra
1 year ago
A) Configure the DMZ firewall to block unnecessary service
VI
Virgina
1 year ago
Hah, I bet the IT team is kicking themselves for not setting the database to run with lower privileges. Rookie mistake!
CO
Corrie
1 year ago
D) Configure the database to run with lower privileges
RI
Ria
1 year ago
B) Install host integrity monitoring software
XE
Xenia
1 year ago
A) Configure the DMZ firewall to block unnecessary service
BE
Berry
1 year ago
I'm going with D as well. Running the database with lower privileges is a critical security practice that could have stopped this attack in its tracks.
DE
Delisa
1 year ago
C) Install updated anti-virus software
ER
Erasmo
1 year ago
B) Install host integrity monitoring software
SH
Shala
1 year ago
A) Configure the DMZ firewall to block unnecessary service
DO
Dong
1 year ago
A) Configuring the DMZ firewall is a good idea, but it wouldn't have prevented the initial root-level access. We need to focus on the database itself.
JU
Jules
1 year ago
A) Configuring the DMZ firewall is a good idea, but it wouldn't have prevented the initial root-level access. We need to focus on the database itself.
TO
Toshia
1 year ago
D) Configuring the database to run with lower privileges would have limited the intruder's access and prevented root-level access.
MI
Mitsue
1 year ago
B) Installing host integrity monitoring software could have detected the unauthorized access and prevented further exploitation.
JU
Junita
1 year ago
But wouldn't installing host integrity monitoring software also help in detecting and preventing such attacks?
AU
Audria
1 year ago
I agree with Keshia, that would have prevented the intruder from gaining root-level access.
AL
Alex
1 year ago
D) Configure the database to run with lower privileges seems like the best option here. Limiting the access rights of the database can really help contain the damage from such an exploit.
RY
Ryan
1 year ago
D) Configure the database to run with lower privileges
AS
Ashton
1 year ago
C) Install updated anti-virus software
JO
Johnetta
1 year ago
B) Install host integrity monitoring software
LI
Lizette
1 year ago
A) Configure the DMZ firewall to block unnecessary service
RE
Reita
1 year ago
User 2
HO
Hollis
1 year ago
User 1
KE
Keshia
2 years ago
We should have configured the DMZ firewall to block unnecessary services.