SY0-701 Question 150

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B2

  The key clue is: "The local administrator account for a company's VPN appliance was unexpectedly used..." On security appliances, a local administrator account often comes with a default username/password. If the default password was never changed, an attacker or unauthorized user could log in using well-known vendor credentials. Changing the default password is one of the first hardening steps and would most directly prevent unauthorized use of the default admin account.

• Chose C1

  C. Assigning individual user IDs Because: Each user would have their own account Access can be tied to a specific person Shared admin credentials wouldn’t be needed Unauthorized use becomes much harder to hide (and easier to prevent with proper controls like MFA) Why the others are less effective: A. Least privilege → Good practice, but doesn’t stop shared admin login misuse B. Changing the default password → Important, but if the password is shared internally, the issue still exists D. Reviewing logs more frequently → Detects after the fact, doesn’t prevent Final answer: C. Assigning individual user IDs

• Chose B2

  In this scenario, the attacker used the default local administrator password on the VPN appliance. The first step is to change the default password, which can be easily found online. You can assign individual accounts but if there is an account with default password configuration is still vulnerable.