Use a larger consulting firm to perform Black box testing.

Use the internal teams to perform White box testing.

Have the small consulting firm redo the Black box testing.

Use the internal teams to perform Grey box testing.

Use the internal team to perform Black box testing.

C

C++

Perl

C#

Java

One virtual environment should be present at each data center, each housing a combination of the converted Windows 2000 and RHEL3 virtual machines.

One data center should host virtualized web servers and the second data center should host the virtualized domain controllers.

Each data center should contain one virtual environment for the web servers and another virtual environment for the domain controllers.

Each data center should contain one virtual environment housing converted Windows 2000 virtual machines and converted RHEL3 virtual machines.

The service did not restart because the bind command is privileged.

The administrator used the wrong SSH port to restart the DNS server.

The service was restarted correctly, but it failed to bind to the network interface.

The administrator must use the sudo command in order to restart the service.

Man in the Middle

Broadcast storm

ARP poisoning

IP Spoofing

A web access control infrastructure performs authentication and passes attributes in a HTTP header to multiple applications.

A password is synchronized between multiple platforms and the user is required to authenticate with the same password across each platform.

An administrator manages multiple platforms with the same username and hardware token. The same username and token is used across all the platforms.

Multiple applications have been integrated with a centralized LDAP directory for authentication and authorization. A user has to authenticate each time the user accesses an application.

RADIUS

TACACS+

Kerberos

LDAP

Require Company XYZ to manage the router ACLs, controlling access to Company ABC resources, but with Company ABC approving the change control to the ACLs. Open up Company ABC’s business partner firewall to permit access to Company ABC’s file, print, secure FTP server, authentication servers and web intranet access.

Place a Company ABC managed firewall in Company XYZ’s hub site; then place Company ABC’s file, print, authentication, and secure FTP servers in a zone off the firewall. Ensure that Company ABC’s business partner firewalls are opened up for web intranet access and other required services.

Place no restrictions on internal network connectivity between Company XYZ and Company ABC. Open up Company ABC’s business partner firewall to permit access to Company ABC’s file, print, secure FTP server, authentication servers and web intranet access.

Place file, print, secure FTP server and authentication domain servers at Company XYZ’s hub site. Open up Company ABC’s business partner firewall to permit access to ABC’s web intranet access and other required services.

Data loss prevention

Input validation

Anti-spam software

Application sandboxing

Remove and hold all drives

Drive wipe

Physical destruction

Install of standard image

Erase all files on drive

Operating system compatibility

The cost of the solution

PBX integration of the service

System availability

Security of data storage

User authentication strategy

PFS should be implemented on all SSH connections.

PFS should be implemented on all VPN tunnels.

Entropy should be enabled on all SSLv2 transactions.

AES256-CBC should be implemented for all encrypted data.

TCP sessions are traversing one firewall and return traffic is being sent through the secondary firewall and sessions are being dropped.

Prioritize UDP traffic and associated stateful UDP session information is traversing the passive firewall causing the connections to be dropped.

TCP and UDP sessions are being balanced across both firewalls and connections are being dropped because the session IDs are not recognized by the secondary firewall.

The firewall administrator connected a dedicated communication cable between the firewalls in order to share a single state table across the cluster causing the sessions to be dropped.

An employee with administrative access to the virtual guests was able to dump the guest memory onto their mapped disk.

A stolen two factor token and a memory mapping RAM exploit were used to move data from one virtual guest to an unauthorized similar token.

A virtual guest was left un-patched and an attacker was able to use a privilege escalation attack to gain unauthorized access.

A host server was left un-patched and an attacker was able to use a VMEscape attack to gain unauthorized access.

Mitigate the risk

Avoid the risk

Transfer the risk

Accept the risk