Which of the following is the BEST compensating control to apply when hardware and software associated with a legacy system cannot be patched or updated to protect against known vulnerabilities or…

Question

Options

• ADeploy firewalls with deep packet inspection capability that can monitor and block advanced
• BBlock all USB access to the local area network (LAN) and permit no external connections
• COverhaul the manufacturing facility and associated IT infrastructure to ensure upgrades can be
• DTake down the production facility to upgrade all the infrastructure following extensive testing

• A
  78% (42)
• B
  4% (2)
• C
  6% (3)
• D
  13% (7)

Explanation

Deploying firewalls with deep packet inspection (DPI) allows for thorough monitoring and filtering of traffic at a granular level, helping to detect and block malicious traffic before it can exploit vulnerabilities in unpatched legacy systems. This compensating control adds a robust layer of security by analyzing traffic and preventing known threats from reaching the vulnerable systems. While blocking USB access or overhauling/upgrading infrastructure may improve security, these options may not be practical or feasible, especially in environments with critical legacy systems. Taking down the production facility is highly disruptive and could result in significant downtime, so it is not the best compensating control. DPI-enabled firewalls provide protection without requiring major disruptions to operations.

No community discussion yet for this question.