During a training exercise, a security analyst must determine the vulnerabilities to prioritize. The analyst reviews the following vulnerability scan output:
Which of the following issues should the analyst address first?
A.
Allows anonymous read access to /etc/passwd
B.
Allows anonymous read access via any FTP connection
C.
Microsoft Defender security definition updates disabled
D.
less command allows for escape exploit via terminal
Allowing anonymous read access to /etc/passwdis acriticalvulnerability because it canexpose user account details, aiding attackers inpassword cracking and privilege escalation.
Option B (Anonymous FTP access)is a risk, but /etc/passwd exposure ismore criticalas it directly affects user authentication.
Option C (Defender updates disabled)isimportant, but it does not present animmediateattack vector like credential exposure.
Option D (less escape exploit)is significant, but it requires user interaction, making itless immediate than a global credential leak.
Thus,A is the correct answer, as it representsan immediate, high-impact security risk.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit