The developers recently deployed new code to three web servers. A daily automated external device scan report shows server vulnerabilities that are failing items according to PCI DSS

SIMULATION

The developers recently deployed new code to three web servers. A daily automated external device scan report shows server vulnerabilities that are failing items according to PCI DSS.

If the vulnerability is not valid, the analyst must take the proper steps to get the scan clean.

If the vulnerability is valid, the analyst must remediate the finding.

After reviewing the information provided in the network diagram, select the STEP 2 tab to complete the simulation by selecting the correct Validation Result and Remediation Action for each server listed using the drop-down options.

Instructions

STEP 1: Review the information provided in the network diagram.

STEP 2: Given the scenario, determine which remediation action is required to address the vulnerability.

If at any time you would like to bring back the initial state of the simulation, please select the Reset All button.

View Answer

Answer: WEB_SERVER01: VALID C IMPLEMENT SSL/TLS

WEB_SERVER02: VALID C SET SECURE ATTRIBUTE WHEN COOKIE SHOULD SENT VIA HTTPS ONLY

WEB_SERVER03: VALID C IMPLEMENT CA SIGNED CERTIFICATE