Misconfiguration Vulnerabilities 2.3

Question 1

Permissions

Answer 1

• The range of activities permitted on an object by an actor in a system.
• Very easy to leave a door open.

Question 2

Open Permissions

Answer 2

• When permissions are not properly set.
• Increasingly common with cloud storage.

Question 3

Administrative/Root Accounts

Answer 3

• Have elevated privileges and require closer scrutiny as to who is issued these credentials

Question 4

Insecure Protocols

Answer 4

• Some protocols aren’t encrypted
• All traffic sent in the clear.

Question 5

Packet Capture (PCAP)

Answer 5

• The methods and files associated with the capture of network traffic in the form of text files.
• Verifies if a data is secure or insecure.

Question 6

Default Settings

Answer 6

• Can be a security risk unless they were created with security in mind.
• Create these settings as the default configuration baseline.

Question 7

Mirai Botnet

Answer 7

• Takes advantage of default configurations.
• Takes over Internet of Things (IoT) devices.
• Is Opensource

Question 8

Open Ports and Services

Answer 8

• Important to manage access as this provides some access to certain systems.
• Managed by firewalls which can sometimes add more complexity.

Question 9

Firewalls

Answer 9

• Rules can be complex
• Always test and audit