Question

1. Reconnaissance: Jane has an intent to penetrate the network in an organization. She has used passive reconnaissance to gather extensive information on the company. She finds out the model numbers of routers and other devices by reading discussions between system administrators in forums. She also has a list of all the IT staff and their phone numbers. She also has the services running on ports on some machines she ran a network scanner on.
   1. What reasonable steps should the company have taken to prevent Jane from finding this information?
   2. What steps should the company take to prevent or reduce the efficacy of port scans?

Answer 1

Ans a: To prevent Jane from finding this information, company should have to make data security more private.

Company has to look at the privacy of the data and also she has to take strict action as per the data protection rule

Ans b:

Filter all outbound ICMP type 3 unreachable messages at border routers and firewalls to prevent UDP port scanning and firewalking from being effective. Consider configuring Internet firewalls so that they can identify port scans and throttle the connections accordingly.