A state actor uses a new type of malware which enters a network undetected, incubates for an extended period, then spreads across the network. It appears to use a Secure Message Block vulnerability. You are not 100% certain that the malware has not already infected your hospital’s network. Until malware detection and removal tools become available, what additional mitigation would be warranted?

a. Blocking TCP Port 445 on internal firewalls.

b. Staff training on social engineering.

c. Strengthening password security requirements.

d. Promptly installing security patches and updates.

e. Sanitising email attachments using off-the-peg quarantine software.

 

Answer rating: 100% (QA)

In the scenario you have presented a few of the suggested mitigation techniques have broad applicability in securing any network from malware Without ... View the full answer