During a recent audit, a company's systems were assessed. Given the following information: Which of the following is the best way to reduce the attack surface?

The correct answer is D. Implementing an application-aware firewall and writing strict rules for the application access. The ProductionControl system is running end-of-life (EOL) software, which poses a high security risk. Since the software cannot be updated, the best way to reduce the attack surface is to use an application-aware firewall with strict access rules, limiting exposure while…

Submitted by the_admin· Mar 6, 2026Security Architecture

Question

During a recent audit, a company's systems were assessed. Given the following information:

Which of the following is the best way to reduce the attack surface?

Exhibits

Options

ADeploying an EDR solution to all impacted machines in manufacturing
BSegmenting the manufacturing network with a firewall and placing the rules in monitor mode
CSetting up an IDS inline to monitor and detect any threats to the software
DImplementing an application-aware firewall and writing strict rules for the application access

How the community answered

(18 responses)

A
11% (2)
B
6% (1)
C
6% (1)
D
78% (14)

Explanation

The ProductionControl system is running end-of-life (EOL) software, which poses a high security risk. Since the software cannot be updated, the best way to reduce the attack surface is to use an application-aware firewall with strict access rules, limiting exposure while maintaining necessary

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice