SY0-701 · Question #92
A security analyst scans a company's public network and discovers a host is running a remote desktop that can be used to access the production network. Which of the following changes should the…
The correct answer is B. Setting up a VPN and placing the jump server inside the firewall. A VPN is a virtual private network that creates a secure tunnel between two or more devices over a public network. A VPN can encrypt and authenticate the data, as well as hide the IP addresses and locations of the devices. A jump server is a server that acts as an intermediary…
Question
A security analyst scans a company's public network and discovers a host is running a remote desktop that can be used to access the production network. Which of the following changes should the security analyst recommend?
Options
- AChanging the remote desktop port to a non-standard number
- BSetting up a VPN and placing the jump server inside the firewall
- CUsing a proxy for web connections from the remote desktop server
- DConnecting the remote server to the domain and increasing the password length
How the community answered
(52 responses)- A15% (8)
- B56% (29)
- C23% (12)
- D6% (3)
Explanation
A VPN is a virtual private network that creates a secure tunnel between two or more devices over a public network. A VPN can encrypt and authenticate the data, as well as hide the IP addresses and locations of the devices. A jump server is a server that acts as an intermediary between a user and a target server, such as a production server. A jump server can provide an additional layer of security and access control, as well as logging and auditing capabilities. A firewall is a device or software that filters and blocks unwanted network traffic based on predefined rules. A firewall can protect the internal network from external threats and limit the exposure of sensitive services and ports. A security analyst should recommend setting up a VPN and placing the jump server inside the firewall to improve the security of the remote desktop access to the production network. This way, the remote desktop service will not be exposed to the public network, and only authorized users with VPN credentials can access the jump server and then the production
Community Discussion
No community discussion yet for this question.