A networking team asked a security administrator to enable Flash on its web browser. The networking team explained that an important legacy embedded system gathers SNMP information from various devices. The system can only be managed through a web browser running Flash. The embedded system will be replaced within the year but is still critical at the

Which of the following should the security administrator do to mitigate the risk?

1. Explain to the networking team the reason Flash is no longer available and insist the team move up the timetable for replacement.
2. Air gap the legacy system from the network and dedicate a laptop with an end-of-life OS on it to connect to the system via crossover cable for management.
3. Suggest that the networking team contact the original embedded system’s vendor to get an update to the system that does not require Flash.
4. Isolate the management interface to a private VLAN where a legacy browser in a VM can be used as needed to manage the system.

A computer used as a component of a larger system is called:

1. An embedded system.
2. A mainframe computer.
3. A network.
4. An operating system.
5. A personal computer

A financial institution has several that currently employ the following controls:

* The severs follow a monthly patching cycle.

* All changes must go through a change management process.

* Developers and systems administrators must log into a jumpbox to access the servers hosting the data using two-factor authentication.

* The servers are on an isolated VLAN and cannot be directly accessed from the internal production network.

An outage recently occurred and lasted several days due to an upgrade that circumvented the approval process. Once the security team discovered an unauthorized patch was installed, they were able to resume operations within an hour. Which of the following should the security administrator recommend to reduce the time to resolution if a similar incident occurs in the future?

Options:

A Require more than one approver for all change management requests.
B Implement file integrity monitoring with automated alerts on the servers.
C Disable automatic patch update capabilities on the servers
D Enhanced audit logging on the jump servers and ship the logs to the SIEM.

B or D ?

A financial institution has several that currently employ the following controls:

* The severs follow a monthly patching cycle.

* All changes must go through a change management process.

* Developers and systems administrators must log into a jumpbox to access the servers hosting the data using two-factor authentication.

* The servers are on an isolated VLAN and cannot be directly accessed from the internal production network.

An outage recently occurred and lasted several days due to an upgrade that circumvented the approval process. Once the security team discovered an unauthorized patch was installed, they were able to resume operations within an hour. Which of the following should the security administrator recommend to reduce the time to resolution if a similar incident occurs in the future?

Options:

A Require more than one approver for all change management requests.
B Implement file integrity monitoring with automated alerts on the servers.
C Disable automatic patch update capabilities on the servers
D Enhanced audit logging on the jump servers and ship the logs to the SIEM.