Question

Please provide an explanation and an example with your response so I can understand, interpret and learn from it. Describe the risks associated with allowing remote access to internal systems and what security should be in place.

Answer 1

If the remote access system has weak security anyone with brute force(try every possible combination) of passwords can intrude(enter) into your internal system. Once he enters it will be a huge disaster for you as he will have full control on your system, he may encrypts file on your systems, browsers have saved passwords for most of website he will get access to all of them. Mostly internal system have weak passwords so it would be easy for him to intrude into other systems as well easily.

He can delete your data or even can crash your systems with virus or malwares.

Security that can be places is allowing access with only SSH public-private key protocol, give private key to only trusted sources and keep it safe, add a firewall rule allowing only certain number of attempts from IP to prevent brute force attack.

Hope you got it :) Please thumbs up