100-150 Question 280
Select 4A company has recently implemented a new Active Directory (AD) structure to manage user authentication. However, users have reported an increase in phishing emails, and the IT team has discovered malware infections on several machines. Additionally, some accounts have been compromised because of weak passwords. What actions should the company take to improve their security posture?
- A
Enforce a strong password policy in Active Directory with requirements for length, complexity, and expiration.
- B
Deploy spam filters and phishing detection mechanisms to block malicious emails.
- C
Disable all user accounts in Active Directory and require users to register new accounts.
- D
Educate employees on recognizing phishing emails and safe online practices.
- E
Implement multi-factor authentication (MFA) for accounts in Active Directory.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To address the threats and vulnerabilities the company faces, a multi-faceted approach is necessary. Strengthening password policies in Active Directory reduces risks associated with weak passwords. Deploying spam filters and phishing detection mechanisms helps limit exposure to phishing attacks and malware. Educating employees empowers them to identify and avoid phishing attempts. Finally, implementing multi-factor authentication provides an additional layer of security to protect against account compromises.
- A. Correct.
Requiring strong passwords reduces the likelihood of accounts being compromised by brute force or common password attacks.
- B. Correct.
Spam filters and phishing detection can prevent malicious emails from reaching users, reducing the likelihood of malware infections and phishing attacks.
- C. Incorrect.
Disabling all accounts and requiring users to create new ones is unnecessary and disruptive. Proper mitigation steps, such as improved policies and education, are more effective.
- D. Correct.
Employee education is critical in combating phishing attacks, as users are often the first line of defense against such threats.
- E. Correct.
Multi-factor authentication adds a layer of security to user accounts, making it much harder for attackers to gain unauthorized access even if passwords are compromised.