NSE 7 - Security Operations 7.6 Architect Materials - Question #40 Discussion

Refer to the exhibit. A compromised PC establishes an SSH connection to an engineering build server, which then relays HTTPS traffic to reach servers that would otherwise have blocked access from the LAN. Assume the LAN to Engineering and Engineering to IT network flows are allowed by design. Which configuration would prevent this attack vector? (Choose one answer)

• A. Enforce SSH version 2 across the organization.
• B. Reject incoming non-standard port HTTPS traffic to the IT servers.
• C. Enable SSL/SSH deep inspection on the firewall.
• D. Disable SSH port forwarding on the build server.

Brave-Dump Community Votes