Exam 312-50v13 Topic 1 Question 154 Discussion

Actual exam question for ECCouncil's 312-50v13 exam
Question #: 154
Topic #: 1

You are currently serving as a cybersecurity analyst at a global banking corporation. Your team has recently identified a series of irregular incidents that indicate a potential backdoor attack on the company's intricate network system. Some of these irregularities include a significant rise in outbound network traffic during non-working hours, unexpected and unaccounted system reboots, and strangely modified system files. Your primary focus now is to detect any hidden backdoor in the system, neutralize it, and ensure the overall integrity of the systems involved, while preventing any further security breaches. Given the complexity of the situation and the importance of maintaining the bank's network security, what combination of measures would be most effective in accurately identifying the potential backdoor, neutralizing it, and ensuring the system's security?

A. Implement strict access control lists (ACLs), ensure regular updates of security patches, and conduct an extensive audit of user accounts and privileges periodically. B. Implement stringent password policies, enforce multi-factor authentication (MFA) for all users, and conduct regular vulnerability assessments of the system. C. Perform detailed monitoring of system and file activity, incorporate anomaly detection techniques in the security framework, and utilize advanced anti-malware tools for comprehensive system scans. D. Review the firewall logs regularly, perform a thorough analysis of network traffic during non- working hours, and carry out an immediate system shutdown and reboot.

Comments

0 Happy Clients

0 Shares

0 Demo Downloads

10 Years in Business