Securing a Web Server Until Replacement
Question
A recent penetration test identified that a web server has a major vulnerability.
The web server hosts a critical shipping application for the company and requires 99.99% availability.
Attempts to fix the vulnerability would likely break the application.
The shipping application is due to be replaced in the next three months.
Which of the following would BEST secure the web server until the replacement web server is ready?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D. E.E.
Given the scenario, the company is facing a dilemma between fixing the vulnerability and risking application availability or leaving the vulnerability unpatched and risking a security incident. The company has decided to delay the fix until the replacement web server is ready.
To best secure the web server until the replacement web server is ready, the company should implement compensating controls to reduce the risk of a security incident. These controls should focus on reducing the likelihood and impact of an attack.
Out of the options provided, the best choice is an application firewall (option C). An application firewall is a type of firewall that examines and filters incoming and outgoing application traffic to protect the server from attacks that exploit application vulnerabilities. An application firewall can prevent attacks that target the known vulnerability until the replacement web server is ready.
Patch management (option A) is not an ideal solution in this case because patching the vulnerability could break the application, leading to downtime and loss of availability.
Antivirus (option B) and spam filters (option D) are not effective solutions for addressing web server vulnerabilities. Antivirus protects against malware, and spam filters protect against unwanted emails, but neither solution addresses the underlying vulnerability.
HIDS (option E) is a host-based intrusion detection system that monitors system activity for signs of a security breach. While HIDS can help detect an attack, it does not prevent the attack from occurring in the first place.
In conclusion, an application firewall is the best solution to secure the web server until the replacement web server is ready.
