Exam 400-007 topic 1 question 159 discussion

Actual exam question from Cisco's 400-007

Question #: 159
Topic #: 1

A security architect receives reports of these incidents:
• An attacker exploits printers and medical devices in the organization to gain control of the network.
• An attacker disrupts operations through attacks on networked business infrastructure.

What is the next step to address these issues after discovery and classification of devices?

A. Ensure trustworthiness of devices
B. Assess continuous security health monitoring
C. Apply a context-based network access control policy
D. Enforce risk-based and adaptive access policies

Show Suggested Answer

Suggested Answer: C 🗳️

by Arsenal16 at March 28, 2023, 2:10 p.m.

Comments

Submit Cancel

Redrum702

8 months, 2 weeks ago

Answer A: Ensure trustworthiness of devices Rationale: Device Security: Given that attackers are exploiting printers and medical devices to gain control of the network, ensuring that these devices are trustworthy and secure is crucial. This involves verifying that devices have proper security configurations, are up-to-date with patches, and have no vulnerabilities that could be exploited. Security Posture: Ensuring trustworthiness means implementing security measures such as authentication, encryption, and regular security updates to safeguard devices from being compromised. Importance: Prevent Exploitation: By ensuring the trustworthiness of devices, you reduce the risk of exploitation by attackers. Securing devices at the outset prevents them from being a point of entry or disruption in the network.

upvoted 1 times

...

bdp123

2 years ago

Selected Answer: C

Section related to 'Zero Trust for the Workplace' https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2020/pdf/ADD-1001-Zero-Trust-Security-Model.pdf

upvoted 4 times

...

Raja135

2 years ago

Selected Answer: D

answer is D

upvoted 2 times

...

Arsenal16

2 years, 1 month ago

Selected Answer: C

as per https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2020/pdf/ADD-1001-Zero-Trust-Security-Model.pdf (Zero Trust for workplace)