John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. The company is aware of various types of security attacks and wants to impede them. Hence, management has assigned John a project to port scan the company's Web Server. For this, he uses the nmap port scanner and issues the following command to perform idle port scanning:
nmap -PN -p- -sI IP_Address_of_Company_Server
He analyzes that the server's TCP ports 21, 25, 80, and 111 are open.
Which of the following security policies is the company using during this entire process to mitigate therisk of hacking attacks?
Suggested Answer: A
Get Premium GISF Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
15 comments · newest first
CO
Cordie
11 months ago
Non-disclosure agreements? Not really relevant here, right?
LI
Lindsey
11 months ago
I agree, audit policies are crucial for identifying vulnerabilities.
SH
Shaquana
12 months ago
Wait, how can they be sure those ports are secure?
CA
Catarina
12 months ago
Definitely! Open ports need constant monitoring.
DA
Dalene
12 months ago
Sounds like they're using an audit policy to keep track of security.
SH
Sherell
1 year ago
This question reminds me of a practice scenario we did on security policies. I think the acceptable use policy is more about user behavior rather than network scanning.
LE
Lenna
1 year ago
I'm not entirely sure, but I feel like an antivirus policy wouldn't really apply here since John is scanning ports, not dealing with malware directly.
JA
Janessa
1 year ago
I remember we discussed how an audit policy is crucial for identifying vulnerabilities, so I think that might be the right answer.
MI
Ming
1 year ago
I keep getting mixed up between audit and acceptable use policies. I guess I need to think about which one focuses more on security measures like this.
KA
Katie
1 year ago
Wait, what happens if the 15 days takes us past the end of February? I'm not sure if that would cause an issue with the leap year. I better double-check the logic here.
IR
Ira
1 year ago
I'm pretty sure PEPs are always a high-risk category. That's definitely one selection.
AN
Annita
1 year ago
Ah, this is the kind of question I was hoping to see! The Fusioninsight HD Manager is responsible for managing the Loader, so I'm confident I can identify the correct operations it would perform.
IS
Isreal
1 year ago
Alright, let's break this down. The company is currently all-equity financed, and they're adding long-term debt. Based on the debt-to-equity ratio, the cost of equity should decrease, since the financial risk to shareholders is now lower.
LA
Lajuana
1 year ago
I'm a bit unsure about this one. The options seem similar, but I'll need to double-check the definitions to make sure I select the correct setting.
VE
Verda
1 year ago
This one seems pretty straightforward. The Authorizing Official is the advisor, so I'll go with option C.