GISF: GIAC Information Security FundamentalsDemo

Question

John is a Network Administrator at Perfect Solutions Inc., which operates a Linux-based network. The company recognizes various security attacks and wants to prevent them. Management therefore assigns John a project to port-scan the company’s Web Server.

To do so, he uses the Nmap port scanner and runs the following command to perform an idle port scan:

nmap -PN -p- -sI IP_Address_of_Company_Server

He determines that the server’s TCP ports 21, 25, 80, and 111 are open.

Which of the following security policies is the company applying throughout this process to reduce the risk of hacking attacks?

A Audit policy
B Antivirus policy
C Non-disclosure agreement
D Acceptable use policy

Explanation

An audit policy supports authorized examination and assessment of systems and security controls. Performing a port scan to identify exposed TCP services is a security-audit activity that helps reveal attack surface and weaknesses for remediation. NIST identifies Audit and Accountability as a security-control family and provides assessment procedures for evaluating security controls.

Learn more

GISF: GIAC Information Security FundamentalsDemo

AstroTutor

Notes

Readiness

QuestionQ255

Community Discussion