ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ128

VerifiedNetwork Penetration Testing Methodology – External

An organization recently experienced a cyberattack in which an attacker obtained valid user credentials and accessed critical information systems. He also enabled other malicious hackers to gain access to those information systems. To defend against and prevent similar future attacks, the organization has decided to route all incoming and outgoing network traffic through a centralized access proxy in addition to validating user credentials.

Which defensive mechanism is the organization seeking to strengthen?

Explanation

Authentication verifies the identity of users requesting access. Validating credentials through a centralized access proxy strengthens identity-based access control and helps prevent unauthorized use of compromised credentials.

Community Discussion

No comments yet. Be the first to start the discussion!