Which of the following is a best practice for securing remote access to organizational resources?

The correct answer is B. Allowing access only from known IP addresses. Restricting remote access to known, approved IP addresses (IP allowlisting) reduces the attack surface by blocking connection attempts from unrecognized sources. Sharing credentials (C) violates the principle of least privilege and accountability. Allowing unrestricted access…

Access Controls Concepts

Question

Options

ANone of the above
BAllowing access only from known IP addresses
CSharing remote access credentials with colleagues
DAllowing unrestricted access from any IP address

How the community answered

(47 responses)

A
4% (2)
B
87% (41)
C
2% (1)
D
6% (3)

Explanation

Restricting remote access to known, approved IP addresses (IP allowlisting) reduces the attack surface by blocking connection attempts from unrecognized sources. Sharing credentials (C) violates the principle of least privilege and accountability. Allowing unrestricted access from any IP (D) exposes resources to the entire internet. Combining IP restrictions with MFA and VPNs represents defense-in-depth for remote access security.

Topics

#Remote Access Security#Access Control#Network Security#Security Best Practices

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice