A county VPN concentrator's management path is reachable from the test VLAN during footprinting. What should the tester flag?
Select an answer to reveal the explanation.
Short Explanation
Reachable admin doors from the test hallway still count as attack surface. Management planes on VPN gear are juicy targets. Flag that exposure early — do not wait until someone starts rewriting routes.
Full Explanation
If a county VPN concentrator's management path is reachable from the test VLAN during footprinting, flag it: reachable administrative interfaces expand attack surface and often warrant urgent reporting as management-plane exposure. Management paths are not 'always safe' from a test VLAN. VPN concentrators do have management interfaces by design; discovering them is not inherently a false positive. Administrative exposure is reportable before changing production VPN routing. Exam caveat: management-plane findings may outrank many user-plane CVEs because they threaten control of remote access for the whole county. Operational check: document source VLAN, management URL/port, authentication observations, and screenshot evidence; notify the designated contact promptly; recommend management ACLs and separate management networking. Document the rationale in the municipal engagement notes so later civic responders know which boundary was honored and which failure modes the rejected options would create for public services. Document the rationale in the municipal engagement notes so later civic responders know which boundary was honored and which failure modes the rejected options would create for public services.