CoreQ Academy1.5 Given a scenario, analyze the findings and recommend the appropriate remediation within a report.
Good recommendations fix the root cause with the right type of control and are realistic for the client to implement.
Technical controls
- System hardening
- Remove unneeded services, apply secure baselines.
- Sanitize user input/parameterize queries
- Validate input and use parameterised queries to stop injection.
- Multifactor authentication
- Stops most password-based attacks.
- Encryption
- Protect sensitive data at rest and in transit.
- Process-level remediation
- Fixing how work is done (e.g. requiring code review) so issues do not recur.
- Patch management
- Regular, prioritised patching of systems and software.
- Key rotation
- Replacing keys and credentials on a schedule and after exposure.
- Certificate management
- Tracking, renewing and revoking certificates; removing weak ones.
- Secrets management solution
- A vault for credentials instead of hard-coded secrets.
- Network segmentation
- Limit lateral movement between zones.
- Infrastructure security controls
- Firewalls, IDS/IPS, WAFs and secure network design.
Administrative controls
- Role-based access control
- Permissions by job role to enforce least privilege.
- Secure software development life cycle
- Security activities built into every development stage.
- Minimum password requirements
- Length and screening against breached passwords.
- Policies and procedures
- Documented rules that make good practice mandatory.
Operational controls
- Job rotation
- Rotating duties so fraud or errors are noticed.
- Time-of-day restrictions
- Limiting access to working hours where appropriate.
- Mandatory vacations
- Requiring time off so someone else performs the duties and irregularities surface.
- User training
- Teaching staff to recognise and report attacks.
Physical controls
- Access control vestibule
- Two-door entry preventing tailgating.
- Biometric controls
- Fingerprint or face recognition for physical access.
- Video surveillance
- Cameras to deter and record.
Check your understanding
Loading quiz…
Original CoreQ Academy material, mapped to objective 1.5 of the publicly available CompTIA PenTest+ PT0-003 exam objectives (Exam objectives V3, document version 5.0). Not affiliated with or endorsed by CompTIA. Contains no exam questions.