CAS-005 · Question #216
A company acquires a location with a large infrastructure of legacy devices. Because of the hardware's age and the legacy software's limitations, the OS cannot be upgraded, and the machines cannot…
The correct answer is D. Application control. Application control restricts which software can run on a system, preventing unauthorized or malicious programs from executing. This is the most effective way to supplement existing controls for legacy systems that cannot be patched or virtualized.
Question
A company acquires a location with a large infrastructure of legacy devices. Because of the hardware's age and the legacy software's limitations, the OS cannot be upgraded, and the machines cannot be virtualized. These machines are not publicly facing, but they do have internet access. The following controls are currently in place:
- EDR
- Anti-malware
- Logging and monitoring
- Host-based firewall
- Proxied internet access
A security architect needs to supplement the existing control strategy with one that restricts unauthorized software. Which of the following controls should the architect recommend to best supplement the existing environment?
Options
- ASIEM
- BIsolation
- CConditional access
- DApplication control
How the community answered
(21 responses)- A19% (4)
- B5% (1)
- C5% (1)
- D71% (15)
Explanation
Application control restricts which software can run on a system, preventing unauthorized or malicious programs from executing. This is the most effective way to supplement existing controls for legacy systems that cannot be patched or virtualized.
Community Discussion
No community discussion yet for this question.