QuestionQ3

Security Operations

A user attempted to open the web page at http://10.1.1.1. The page previously did not require authentication, but the browser now prompts for credentials. Which action would best prevent the issue from happening again and lower the likelihood of credential exposure?

  • A Implementing 802.1x EAP-TTLS on access points to reduce the risk of evil twins
  • B Transitioning internal services to use DNS security
  • C Modifying web server configuration and utilizing X509 certificates forauthentication
  • D Installing new rules for the IDS to detect impersonation attacks
Explanation

Plain HTTP does not protect authentication data in transit. Configuring the web server to use X.509 certificates enables TLS-protected authentication, reducing the risk that credentials are exposed through interception or service impersonation.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!