SEC‐440 Availability and Redundancy Security Reflection - DefiantCoder/Tech-Journals GitHub Wiki
Problem 1
- Identify the problem
Only the only remote connection that requires 2-factor authentication on the network is Web01
- Propose a solution or technical control that could address the problem.
By instituting 2-factor authentication on the other systems in the network you can easily increase the security of the network and further limit access to those with the authenticator AND credentials.
Problem 2
- Identify the problem
To reduce downtime working on milestones I am using a common password across the network instead of unique complex passwords for each user account on each machine. This is faster but is a less secure practice.
- Propose a solution or technical control that could address the problem.
By using unique complex passwords across the network it becomes much more difficult for malicious users to access different parts of the network.
Problem 3
- Identify the problem
Since we are using multiple redundant machines with many similarities tracking which box has had what done to it can be complicated and if a mistake is made troubleshooting can be complex.
- Propose a solution or technical control that could address the problem.
Taking consistent snapshots and detailed notes of what has been done to each machine it becomes less complicated if something goes wrong and figuring out which machine needs troubleshooting.