CAS-005 · Question #471
In a recent audit, several critical legacy systems, which are externally exposed so that a specific vendor can manage them remotely, were identified. These systems must remain available to the vendor
The correct answer is B. Create a VPN connection and set up firewall rules so only specific connections are allowed to. Creating a VPN connection with firewall rules restricts vendor access to only authorized connections, maintaining security while restoring necessary remote management capability.
Question
In a recent audit, several critical legacy systems, which are externally exposed so that a specific vendor can manage them remotely, were identified. These systems must remain available to the vendor for the next six months. A security team segmented the network so these systems can only communicate with internal resources. Which of the following actions would be most appropriate to restore the vendor's access to manage these systems?
Options
- ADisable all connections to the systems, and implement a backup solution to capture the needed
- BCreate a VPN connection and set up firewall rules so only specific connections are allowed to
- CDisable external connections to those systems for the next six months.
- DIsolate the critical systems so they can only be remotely managed from the internet.
How the community answered
(30 responses)- A3% (1)
- B83% (25)
- C10% (3)
- D3% (1)
Explanation
Creating a VPN connection with firewall rules restricts vendor access to only authorized connections, maintaining security while restoring necessary remote management capability.
Community Discussion
No community discussion yet for this question.