Exam SY0-601 topic 1 question 668 discussion

Actual exam question from CompTIA's SY0-601

Question #: 668
Topic #: 1

A security audit has revealed that a process control terminal is vulnerable to malicious users installing and executing software on the system. The terminal is beyond end-of-life support and cannot be upgraded, so it is placed on a protected network segment. Which of the following would be MOST effective to implement to further mitigate the reported vulnerability?

A. DNS sinkholing
B. DLP rules on the terminal
C. An IP blacklist
D. Application whitelisting

Show Suggested Answer

Suggested Answer: D 🗳️

by sujon_london at Aug. 31, 2023, 12:24 p.m.

Comments

Submit Cancel

sujon_london

Highly Voted 1 year, 10 months ago

Selected Answer: D

Application whitelisting. Application whitelisting is a security measure that allows only approved and trusted applications to run on a system, while blocking all other applications. By implementing application whitelisting on the vulnerable process control terminal, any attempt to install and execute unauthorized software would be blocked, effectively mitigating the reported vulnerability..

upvoted 13 times

...

adamer91

Most Recent 1 year, 4 months ago

Selected Answer: D

Application whitelisting

upvoted 1 times

...

loginnow123

1 year, 6 months ago

Selected Answer: D

Application whitelisting so only the initial approved application is able to run, and anything else would be blocked.

upvoted 1 times

...