CA1-005: CompTIA SecurityXDemo

By CompTIA · Question Mode

QuestionQ51

Security Architecture

A hospital requires the following for remote, third-party monitoring of its HVAC system:

  • The vendor must continuously monitor system health and respond as needed.
  • The vendor must have network access only to the HVAC system.
  • The vendor must be the sole entity with access to the HVAC system.

Which option best satisfies the hospital's requirements?

  • A Deploying a RDP jump box to allow remote system monitoring
  • B Installing the vendor's monitoring appliance on the internal network and allowing outbound SSL connectivity
  • C Creating a site-to-site VPN tunnel and allowing restricted access to the system
  • D Implementing a reverse web proxy and allowing access from the internet
Explanation

An internally deployed vendor monitoring appliance using outbound SSL connectivity supports continuous monitoring and response without opening an inbound remote-access service into the hospital network. Its communications can be restricted to the HVAC system and the vendor service, providing more isolation than an RDP jump box, a site-to-site VPN, or an internet-facing reverse proxy.

Community Discussion

No comments yet. Be the first to start the discussion!