MENU
John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. The company is aware of various types of security attacks and wants to impede them. Hence, management has assigned John a project to port scan the company's Web Server. For this, he uses the nmap port scanner and issues the following command to perform idle port scanning:
nmap -PN -p- -sI IP_Address_of_Company_Server
He analyzes that the server's TCP ports 21, 25, 80, and 111 are open.
Which of the following security policies is the company using during this entire process to mitigate the risk of hacking attacks?
Suggested Answer: B
Get Premium GCIH Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
36 comments · newest first
CR
Craig
10 months ago
Non-disclosure agreements don't really fit this scenario.
WI
Winifred
11 months ago
Wow, I didn't know nmap could do that!
SH
Shenika
11 months ago
Not sure about that, could be acceptable use too.
EV
Eveline
11 months ago
I think it's definitely an audit policy.
HE
Helga
11 months ago
The command uses idle scanning, pretty clever!
BE
Bernardo
11 months ago
I’m leaning towards the Audit policy as well, but I remember a question similar to this where the focus was on compliance and monitoring.
TE
Terry
12 months ago
I feel like the Acceptable Use Policy could be relevant too, especially since it outlines how employees should use company resources.
HA
Harrison
12 months ago
I think it might be the Audit policy since John is scanning for vulnerabilities, but I could be mixing it up with something else we practiced.
MO
Mose
12 months ago
I remember we discussed different security policies in class, but I'm not entirely sure which one applies here.
HE
Heike
12 months ago
I feel pretty confident about this one. The company is proactively scanning its own systems to identify potential vulnerabilities, so the relevant policy would be the Audit Policy, which governs how the company monitors and reviews its security measures.
VA
Vanda
12 months ago
Hmm, I'm a bit confused by the technical details in this question. I'll need to make sure I understand the port scanning process and how it relates to the security policies before I can answer this.
LA
Latanya
1 year ago
This seems like a straightforward question about network security policies. I'll need to carefully analyze the information provided in the question to determine which policy is being used.
AM
Amie
1 year ago
Okay, the key here is that the company is aware of security attacks and is actively trying to mitigate them by having John perform a port scan. Based on that, I think the correct answer is the Acceptable Use Policy, which would outline the company's security procedures and expectations.
LA
Lanie
1 year ago
I'm a bit confused by this question. The Revalue Open Balance feature is new to me, and I'm not sure how it relates to the different account types. I'll have to review my notes and try to figure out the logic behind this one.
SO
Sommer
1 year ago
This seems straightforward to me. Available-to-promise data allows you to plan inventory levels to meet customer demand, so the answer has to be A, inventory planning.
EM
Emilio
1 year ago
Okay, I think I've got this. The key here is that Router 1 isn't receiving any routes from Router 2. So the issue is likely on Router 2's end, probably with the routing protocol configuration. I'd try modifying the router ID or network type settings to see if that fixes the problem.
AS
Ashton
1 year ago
The company is being responsible by addressing security concerns, but I hope they have a clear acceptable use policy to ensure everyone is on the same page about proper network usage.
MI
Mi
1 year ago
C) Acceptable use policy
CR
Cristy
1 year ago
B) Antivirus policy
LU
Luis
1 year ago
A) Non-disclosure agreement
AN
Annice
1 year ago
Lol, I bet the IT team is doing the 'nmap dance' right now, hoping they don't accidentally take down the server. At least they're using the right tools for the job.
KR
Kris
1 year ago
C) Acceptable use policy
GE
Geoffrey
1 year ago
B) Antivirus policy
SH
Shelba
1 year ago
A) Non-disclosure agreement
TA
Tamra
1 year ago
I'm guessing the correct answer is D) Audit policy. The company is actively scanning its web server, which should be part of a comprehensive audit process to identify and mitigate security risks.
DA
Darell
1 year ago
C) Acceptable use policy
TA
Talia
1 year ago
B) Antivirus policy
QU
Quentin
1 year ago
A) Non-disclosure agreement
CH
Chan
1 year ago
Hmm, this looks like a network security assessment. The company is being proactive, which is good. I hope they have a solid audit policy in place to ensure the process is transparent and secure.
AR
Argelia
1 year ago
Lettie: Definitely, it's a good practice for maintaining network security.
NO
Nohemi
1 year ago
User 3: I agree, it helps ensure that the network is being assessed properly.
LE
Lettie
1 year ago
User 2: Yes, that's important for transparency and security.
MO
Mozelle
1 year ago
User 1: I think the company is using an audit policy.
SA
Salome
2 years ago
I believe the company should also have an Acceptable use policy to ensure employees follow security guidelines while using the network.
AM
Amos
2 years ago
I agree with Sommer. Audit policy helps in monitoring and detecting any unauthorized access or activities.
SO
Sommer
2 years ago
I think the company is using the Audit policy to mitigate the risk of hacking attacks.