You are the Cybersecurity Analyst for a mid-size retail company. Your company has just acquired a rival company and has discovered that its security practices are deficient and need to be updated to be compliant with your company’s standards. The acquisition’s primary network uses Microsoft Active Directory with Windows Server 2019 and Windows 10 on the desktops. In addition, the point of sale (POS) system is on its network and consists of four Linux servers with Oracle 11g databases running on top of them. There is a plan to merge the two networks, but they do not want to proceed until they are sure that all systems have been sufficiently hardened. Management has asked you to supply hardening recommendations only for the following systems. 

● Windows Server 2019  Domain Controllers Web servers (Intranet mainly) 

● Oracle Linux (POS Servers) 

● Windows 10, Users using the POS software, Users not using the POS software The domain controllers and POS servers need extra security, as do the Windows 10 machines running the POS software, so use Level 2 controls for them. Use Level 1 controls for the rest. 

Using the CIS Controls and Benchmarks, craft a basic hardening guide for all five groups of systems. The benchmark documentation for these systems is extensive, so just pick a few that you feel would be important enough to include in your recommendations.

Answer rating: 100% (QA)

Given the scenario the action plan would be to follow the CIS Controls and Benchmarks apply level 2 ... View the full answer