You are a cybersecurity analyst tasked with interpreting scan data from Company As servers You must verify the requirements are being met for all of the servers and recommend changes if you find they are not The company's hardening guidelines indicate the following
* TLS 1 2 is the only version of TLS
running.
* Apache 2.4.18 or greater should be used.
* Only default ports should be used.
INSTRUCTIONS
using the supplied data. record the status of compliance With the company's guidelines for each server.
The question contains two parts: make sure you complete Part 1 and Part 2. Make recommendations for Issues based ONLY on the hardening guidelines provided.
Part 1:
AppServ1:

AppServ2:

AppServ3:

AppServ4:


Part 2:

Correct Answer:

check the explanation part below for the solution:
Explanation:
Part 1:

Part 2:
Based on the compliance report, I recommend the following changes for each server:
AppServ1: No changes are needed for this server.
AppServ2: Disable or upgrade TLS 1.0 and TLS 1.1 to TLS 1.2 on this server to ensure secure encryption and communication between clients and the server. Update Apache from version 2.4.17 to version 2.4.18 or greater on this server to fix any potential vulnerabilities or bugs.
AppServ3: Downgrade Apache from version 2.4.19 to version 2.4.18 or lower on this server to ensure compatibility and stability with the company's applications and policies. Change the port number from 8080 to either port 80 (for HTTP) or port 443 (for HTTPS) on this server to follow the default port convention and avoid any confusion or conflicts with other services.
AppServ4: Update Apache from version 2.4.16 to version 2.4.18 or greater on this server to fix any potential vulnerabilities or bugs. Change the port number from 8443 to either port 80 (for HTTP) or port 443 (for HTTPS) on this server to follow the default port convention and avoid any confusion or conflicts with other services.

Comment: *

Name: *

Email: *

Verification: *

New employees in an organization have been consistently plugging in personal webcams despite the company policy prohibiting use of personal devices. The SOC manager discovers that new employees are not aware of the company policy. Which of the following will the SOC manager most likely recommend to help ensure new employees are accountable for following the company policy?

• A.Human resources must email a copy of a user agreement to all new employees
• B.Supervisors must get verbal confirmation from new employees indicating they have read the user agreement
• C.All new employees must take a test about the company security policy during the cjitoardmg process
• D.All new employees must sign a user agreement to acknowledge the company security policy

Comment: *

Name: *

Email: *

Verification: *

The security analyst received the monthly vulnerability report. The following findings were included in the report
* Five of the systems only required a reboot to finalize the patch application.
* Two of the servers are running outdated operating systems and cannot be patched The analyst determines that the only way to ensure these servers cannot be compromised is to isolate them. Which of the following approaches will best minimize the risk of the outdated servers being compromised?

• A.Compensating controls
• B.Due diligence
• C.Maintenance windows
• D.Passive discovery

Comment: *

Name: *

Email: *

Verification: *

A security technician is testing a solution that will prevent outside entities from spoofing the company's email domain, which is compatia.org. The testing is successful, and the security technician is prepared to fully implement the solution. Which of the following actions should the technician take to accomplish this task?

• A.Add TXT @ "v=spfl mx include:_spf.comptia. org -all" to the DNS record.
• B.Add : XT @ "v=spfl mx include:_spf.comptia.org -all" to the email server.
• C.Add TXT @ "v=spfl mx include:_spf.comptia.org +all" to the domain controller.
• D.AddTXT @ "v=apfl mx lnclude:_spf .comptia.org +a 11" to the web server.

Comment: *

Name: *

Email: *

Verification: *

A security analyst found the following vulnerability on the company's website:
<INPUT TYPE="IMAGE" SRC="javascript:alert('test');">
Which of the following should be implemented to prevent this type of attack in the future?

• A.Input sanitization
• B.Output encoding
• C.Code obfuscation
• D.Prepared statements

Comment: *

Name: *

Email: *

Verification: *