Security+ 701 PBQ 18

Your organization has multiple subnets and internal mail servers. You need to configure routing rules to ensure traffic is properly directed. Your network diagram shows the following:

Configure the firewall to route traffic from Subnet B to the Internal Mail Server.

Your company’s executive is requesting an evaluation of current security controls and recommendations for new implementations. Identify and categorize the following security controls as Preventative, Detective, Corrective, or Directive.

You need to configure password policies using the Windows Registry to enhance security. In case you are unfamiliar with Windows Registry, here is a screenshot:

Current Registry Settings:

• MinimumPasswordLength: 10
• PasswordComplexity: 0
• MaximumPasswordAge: 120

Modify the following registry settings to enforce a strong password policy.

Your company’s executive has sent an email requesting an evaluation of current security controls and recommendations for new implementations.

Email from CEO:

Subject: Security Breaches Concern

Team,

We’ve had several security breaches recently. I need a detailed plan outlining our current security controls and recommendations for improvement. Focus on preventative, detective, corrective, compensating, directive, and deterrent controls.

Thanks,
CEO

Email from IT Manager:

Subject: RE: Security Breaches Concern

CEO,

Below are the current controls:

– Firewall (Preventative)
– IDS (Detective)
– Data Backups (Corrective)
– Training Programs (Directive)

We recommend adding:

– Multi-factor Authentication (Preventative)
– Security Information and Event Management (SIEM) (Detective)
– Incident Response Plan (Corrective)
– Virtual Private Network (VPN) (Compensating)
– Security Signage (Deterrent)

Regards,
IT Manager

Identify and categorize the following security controls based on the email chain.