Vulnerability Assessment (VA) is the way to find weaknesses in a system that helps security professionals to plan their protections and attacks countermeasure strategies.

Vulnerability Assessment (VA) is the way to find weaknesses in a system that helps security professionals to plan their protections and attacks countermeasure strategies. It needs to be carefully managed for its resources, to ensure the highest performance and operational efficiency. In this Tutoring you require to design a vulnerability scanning strategy on a given operating system in virtual environment. You should design the standard procedure for scanning along with deploying a proper tool to identify the vulnerabilities.

Section A - Task 1: Vulnerability Scanning and Assessment

(Windows Server 2008.vm)

Vulnerability in SMB could allow remote code execution

3- Discuss the vulnerabilities in detail subject to:

1. Why the vulnerabilities exist in the victim machine? What caused its existence?
2. How can the attacker exploit them?
3. Give an example of vulnerabilities exploitation by the attackers in real world scenarios?

Section A - Task 2 (Individual): Recommendation on How to Patch

This is an individual task to recommend an appropriate solution to patch the existed vulnerabilities found under Task 1. As mentioned earlier, the main aim of conducting VA is to find flaws in the system and provide solution on how to patch them to prevent further exploitation. Given that, you were given a task to provide security update and solutions for discussed vulnerabilities in earlier section.

HOW TO PATCH Vulnerability in SMB could allow remote code execution

Section A - Deliverables for Task 2:

• Indicate ONE (1) of the vulnerabilities resulted in the list from Task 1 and discuss how to Patch the vulnerability.
• Provide step-by-step technical details on how to patch the selected vulnerability.