CAS-003 · Question #128
The helpdesk department desires to roll out a remote support application for internal use on all company computers. This tool should allow remote desktop sharing, system log gathering, chat…
The correct answer is B. What accountability is built into the remote support application? A remote support tool with capabilities like remote desktop, registry access, log gathering, and inventory management represents an extremely powerful attack surface if misused-whether by a malicious insider, a compromised support agent, or an external attacker. The most…
Question
The helpdesk department desires to roll out a remote support application for internal use on all company computers. This tool should allow remote desktop sharing, system log gathering, chat, hardware logging, inventory management, and remote registry access. The risk management team has been asked to review vendor responses to the RFQ. Which of the following questions is the MOST important?
Options
- AWhat are the protections against MITM?
- BWhat accountability is built into the remote support application?
- CWhat encryption standards are used in tracking database?
- DWhat snapshot or "undo" features are present in the application?
- EWhat encryption standards are used in remote desktop and file transfer functionality?
How the community answered
(19 responses)- A5% (1)
- B58% (11)
- C21% (4)
- D11% (2)
- E5% (1)
Explanation
A remote support tool with capabilities like remote desktop, registry access, log gathering, and inventory management represents an extremely powerful attack surface if misused-whether by a malicious insider, a compromised support agent, or an external attacker. The most critical question is what accountability mechanisms are built in: audit logging, session recording, identity attribution, and alerts for privileged actions. Without accountability, you cannot detect or investigate abuse. Encryption (options C and E) and MITM protection (option A) are important but secondary concerns; if an authorized user misuses the tool, encryption does not help. Undo features (option D) are a convenience, not a security control.
Topics
Community Discussion
No community discussion yet for this question.