SIMULATION -
The developers recently deployed new code to three web servers. A daily automated external device scan report shows server vulnerabilities that are failing items according to PCI DSS.
If the vulnerability is not valid, the analyst must take the proper steps to get the scan clean.
If the vulnerability is valid, the analyst must remediate the finding.
After reviewing the information provided in the network diagram, select the STEP 2 tab to complete the simulation by selecting the correct Validation Result and
Remediation Action for each server listed using the drop-down options.
Instructions -
STEP 1: Review the information provided in the network diagram.
STEP 2: Given the scenario, determine which remediation action is required to address the vulnerability.
If at any time you would like to bring back the initial state of the simulation, please select the Reset All button.
//IMG//
//IMG//
//IMG//
//IMG//
//IMG//
//IMG//
Case study scenario
The question contains multiple images showing a network diagram, detailing various servers, networks, and connections, including key elements such as a router, firewall, and listed IP addresses for CDE and Internal Network components. The user must utilize this layout to assess vulnerabilities and determine appropriate actions.