Countermeasures Across Hacking Phases EHE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which countermeasure is most effective in reducing the attack surface for port scanning and enumeration?

   • ADisabling unnecessary services and closing unused ports
   • BImplementing strong password policies
   • CConducting regular security awareness training
   • DUsing encryption for all network traffic
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security team suspects that an attacker has been tampering with logs on a Windows server to hide their activities. The server's event logs are stored locally. Which countermeasure would best help detect log tampering?

   • AEnable event log auditing for logon events only.
   • BConfigure the server to forward event logs to a centralized, write-once logging server.
   • CSet the event log to overwrite old events as needed.
   • DIncrease the size of the local event log files.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company has a policy that requires all remote employees to use multi-factor authentication (MFA) when accessing the corporate VPN. However, a recent phishing attack compromised several employees' credentials. Which additional countermeasure would be the most effective to prevent the attacker from using those stolen credentials to gain access?

   • AIncrease the VPN timeout to allow more time for authentication.
   • BDisable the VPN during non-business hours.
   • CRequire employees to change their passwords every 30 days.
   • DImplement conditional access policies that block VPN access from unusual locations or devices.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A network administrator wants to reduce the risk of an attacker discovering open ports and running services through a port scan. The administrator has already disabled all unnecessary services on the servers. Which additional countermeasure would be the most effective?

   • AChange the default port numbers for all services.
   • BEnable logging of all connection attempts to the servers.
   • CInstall a host-based intrusion prevention system (HIPS) on each server.
   • DImplement network segmentation and place the servers behind a firewall that only allows required traffic.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which practice is most effective in reducing the amount of information an attacker can gather during reconnaissance?

   • ADisabling unnecessary services on servers
   • BInstalling antivirus software on all endpoints
   • CMinimizing exposed information such as employee details and network diagrams on public websites
   • DUsing strong passwords on all user accounts
   Reveal Solution Discussion Select an answer first