15 Which of the following will best help you ensure a database server can withstand a recently discovered vulnerability?

1. Updating the company vulnerability scanner and conducting a new scan
2. Adding a buffer overflow rule to the intrusion detection system
3. Reconfiguring the firewall
4. Installing a system update

__________________________________________________________________

16 You have determined that the company Web server has several vulnerabilities, including a buffer overflow that has resulted in an attack. The Web server uses PHP and has direct connections to an Oracle database server. It also uses many CGI scripts. Which of the following is the most effective way to respond to this attack?

1. Installing software updates for the Web server daemon
2. Using the POST method instead of the GET method for a Web form
3. Installing an intrusion detection service to monitor logins
4. Using the GET method instead of the POST method for a Web form

____________________________________________________________________________________________________________

A security breach has occurred in which a third party was able to obtain and misuse legitimate

authentication information. After investigation, you determined that the specific cause for the breach was that end users have been placing their passwords underneath their keyboards. Which step will best help you resolve this problem?

1. Discipline specific end users as object lessons to the rest of the staff and reset passwords on all systems immediately.
2. Change all passwords on the company servers immediately and inform end users that their passwords will be changing on a regular basis.
3. Set passwords to expire at specific intervals and establish mandatory continual training sessions.
4. Inform end users that their passwords will be changing on a regular basis and require more complex passwords.

please explain your answer