CAS-001 · Question #490
The helpdesk department desires to roll out a remote support application for internal use on all company computers. This tool should allow remote desktop sharing, system log gathering, chat…
The correct answer is B. What accountability is built into the remote support application? The MOST important question is about accountability (B) because the application has extremely broad and invasive capabilities: remote desktop sharing, registry access, hardware logging, and inventory management. Without robust audit trails, logging of all sessions, and…
Question
The helpdesk department desires to roll out a remote support application for internal use on all company computers. This tool should allow remote desktop sharing, system log gathering, chat, hardware logging, inventory management, and remote registry access. The risk management team has been asked to review vendor responses to the RFQ. Which of the following questions is the MOST important?
Options
- AWhat are the protections against MITM?
- BWhat accountability is built into the remote support application?
- CWhat encryption standards are used in tracking database?
- DWhat snapshot or "undo" features are present in the application?
- EWhat encryption standards are used in remote desktop and file transfer functionality?
How the community answered
(18 responses)- A17% (3)
- B72% (13)
- C6% (1)
- E6% (1)
Explanation
The MOST important question is about accountability (B) because the application has extremely broad and invasive capabilities: remote desktop sharing, registry access, hardware logging, and inventory management. Without robust audit trails, logging of all sessions, and user-action tracking, there is no way to detect or investigate misuse or abuse of these elevated privileges. Encryption (A, C, E) and undo features (D) are secondary concerns - if accountability is absent, even a fully encrypted tool can be used maliciously without detection. Accountability is the foundational control that makes all other security controls meaningful for this type of privileged tool.
Topics
Community Discussion
No community discussion yet for this question.