100-150 Question 282
Select 4An organization using Active Directory (AD) has noticed an increase in phishing emails targeting users. One successful phishing attack led to a compromised user account, which was then used to launch a denial-of-service attack on internal systems. Which of the following measures can help prevent similar incidents in the future?
- A
Implement a password policy requiring complex passwords with a mix of characters, numbers, and symbols.
- B
Enable multi-factor authentication (MFA) for all AD accounts.
- C
Disable all external email domains to prevent phishing emails from being delivered.
- D
Regularly update and patch the Active Directory server and connected systems.
- E
Conduct security awareness training to educate users about phishing and social engineering techniques.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
The measures to prevent similar incidents include implementing strong password policies, enabling multi-factor authentication, maintaining updated systems to mitigate vulnerabilities, and educating users about phishing threats. Disabling all external email domains is not a realistic or effective solution, as it would severely disrupt normal communication workflows.
- A. Correct.
Implementing a complex password policy reduces the chances of attackers successfully guessing or brute-forcing user credentials.
- B. Correct.
Enabling multi-factor authentication (MFA) adds an additional layer of security, making it harder for attackers to misuse compromised credentials.
- C. Incorrect.
Disabling all external email domains is not practical, as many organizations rely on communication with external partners and clients. Instead, email filtering solutions should be implemented.
- D. Correct.
Regular updates and patches ensure that vulnerabilities in the AD server and connected systems are addressed, reducing the risk of exploitation.
- E. Correct.
Security awareness training helps users recognize and avoid phishing attempts, reducing the likelihood of credential compromise.