Certified Incident Handler (CIH) Practice Ecam

What practice can make an organizational network vulnerable to malware incidents?

1. Use of strong passwords

2. Ensure access to only valid websites

3. Access websites with invalid URLs and use HTTP

4. Implement network segmentation

The correct answer is: Access websites with invalid URLs and use HTTP

Accessing websites with invalid URLs and using HTTP can indeed expose an organizational network to malware incidents. This practice significantly increases the risk of encountering malicious websites that may attempt to exploit vulnerabilities in the browser or operating system. When users navigate to websites with invalid URLs, there's a possibility that they could be redirected to counterfeit sites designed to install malware or capture sensitive information. Furthermore, relying on HTTP—rather than the more secure HTTPS—means that data transmission is not encrypted. This lack of encryption can allow attackers to intercept and manipulate data, making it easier for them to inject malware into the network. By not ensuring secure connections and allowing access to potentially harmful websites, an organization is essentially lowering its defenses against cyber threats. In contrast, practices such as using strong passwords, ensuring access to only valid websites, and implementing network segmentation, are all strategies that enhance security and reduce vulnerabilities within an organization's network.