Câu 4: PT0-001: CompTIA PenTest+ Certification Exam

A penetration tester was able to retrieve the initial VPN user domain credentials by phishing a member of the IT department. Afterward, the penetration tester obtained hashes over the VPN and easily cracked them using a dictionary attack. Which of the following remediation steps should be recommended? (SelectTHREE).

1. A. Mandate all employees take security awareness training.
2. B. Implement two-factor authentication for remote access. — đáp án hiện tại
3. C. Install an intrusion prevention system. — đáp án hiện tại
4. D. Increase password complexity requirements.
5. E. Install a security information event monitoring solution.
6. F. Prevent members of the IT department from interactively logging in as administrators.
7. G. Upgrade the cipher suite used for the VPN solution. — đáp án hiện tại