exam questions

Exam CAS-004 All Questions

View all questions & answers for the CAS-004 exam

Exam CAS-004 topic 1 question 260 discussion

Actual exam question from CompTIA's CAS-004
Question #: 260
Topic #: 1
[All CAS-004 Questions]

A security architect for a manufacturing company must ensure that a new acquisition of IoT devices is securely integrated into the company’s Infrastructure. The devices should not directly communicate with other endpoints on the network and must be subject to network traffic monitoring to identify anomalous traffic. Which of the following would be the BEST solution to meet these requirements?

  • A. Block all outbound traffic and implement an inline firewall.
  • B. Allow only wireless connections and proxy the traffic through a network tap.
  • C. Establish an air-gapped network and implement an IDS.
  • D. Use a separate VLAN with an ACL and implement network detection and response.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
last_resort
Highly Voted 6 months, 4 weeks ago
Selected Answer: D
D. makes the most sense. You would not air gap IoT devices since integrating with other products is their purpose.
upvoted 6 times
...
javier051977
Highly Voted 6 months, 4 weeks ago
Selected Answer: D
By using a separate VLAN (Virtual Local Area Network) with an Access Control List (ACL), the IoT devices can be isolated from the rest of the network, preventing direct communication with other endpoints on the network. Additionally, by implementing network detection and response, anomalous traffic can be identified and investigated.
upvoted 6 times
...
BLADESWIFTKNIFE
Most Recent 7 months ago
Selected Answer: C
I agree
upvoted 1 times
...
Amin4799
7 months, 1 week ago
Selected Answer: D
d A separate VLAN can be used to ensure that IoT devices do not directly communicate with other endpoints on the network. An access control list (ACL) can be implemented to allow only necessary communication to the internet or specific devices, and block all other traffic.
upvoted 4 times
...
Geofab
7 months, 1 week ago
Selected Answer: D
D makes sense to me. put all the IOT devices on their own network and control access to and fro via ACLs
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago