View all questions & answers for the NSE 7 - Security Operations 7.6 Architect Materials exam


Question 40 Discussion

Refer to the exhibit. A compromised PC establishes an SSH connection to an engineering build server, which then relays HTTPS traffic to reach servers that would otherwise have blocked access from the LAN. Assume the LAN to Engineering and Engineering to IT network flows are allowed by design. Which configuration would prevent this attack vector? (Choose one answer)

  • A. Enforce SSH version 2 across the organization.
  • B. Reject incoming non-standard port HTTPS traffic to the IT servers.
  • C. Enable SSL/SSH deep inspection on the firewall.
  • D. Disable SSH port forwarding on the build server.
Correct Answer: D

Brave-Dump Clients Votes

D 100%

Comments



Brave-Dumps Admin 2026-02-01 23:46:14

Selected Answers: D


Reference: Page 33 in NSE 7 – Security Operations 7.6 Architect Study Guide