Common security issues

Question 1

Segmentation Fault

Answer 1

Segmentation fault is an error that occurs on an OS when an application tries to access part of memory it should not have access to.

Question 2

Basic Misconifiguration

Answer 2

Default creds, outdated software, maintenance code (providing users with more info than normal).

Question 3

Firewalls Misconifiguration

Answer 3

Rules can provide too much access.

Question 4

Content filter Misconifiguration

Answer 4

Content filters – URLs not specific enough, some protocols not filtered i.e. https. Access points – no encryption, Open config.

Question 5

Unauthorised software

Answer 5

Could be malware, receive no further security updates, no license, may conflict with approved software.

Question 6

Baseline deviation

Answer 6

common with VPNS, outside device wants to connect in, checks should be done against OS, AV Version, signature version, OS patches. No remote access until everything matches baseline.

Question 7

Bad/missing license

Answer 7

Licenses – A missing/bad license may cause problems with data integrity.