What action should a university take after a data breach due to service vulnerabilities?

• A. Increase the storage capacity of the database
• B. Implement redundancy in database management systems
• C. Enhance security measures including port security
• D. Focus on optimizing database queries

Answer: (C)

Enhancing security measures, including port security, is essential following a data breach due to service vulnerabilities because it directly addresses the root cause of the incident. After a breach, it is critical to evaluate and strengthen the security posture to prevent similar occurrences in the future. Port security involves controlling access to the network ports and reducing the chances of unauthorized access, which can serve as an entry point for attackers. Implementing robust security measures can include firewall configurations, intrusion detection and prevention systems, and securing all open ports to limit exposure to vulnerabilities.

Increasing storage capacity of the database, implementing redundancy, and optimizing database queries do not directly relate to preventing future breaches. While those measures may improve database performance and reliability, they do not address the security weaknesses that were exploited in the breach. Therefore, focusing on enhancing security measures is the most pertinent and effective action for safeguarding the university's data moving forward.