Exam PT0-002 topic 1 question 291 discussion

What a dumb question again, CompTIA want us to be confused about whether or not this is a physical pentest by saying "routine pentest of a physical data centre". Wtf does that mean? Is it a physical pentest? If so, then the answer is biometric control, and the 5 year old firewall configuration is there to confuse you. If it's not a physical pentest then the answer is SSH key rotation and the word "physical" is there to confuse you. Either way you're confused

D is the test question answer but, they are implementing a technical/logical control and referring, in the questions, to a "Physical" assessment. WACK

To reduce the risk of future security breaches related to outdated firewall configurations D. SSH key rotation: Regularly rotating SSH keys is a good practice for maintaining secure access to systems, including firewalls. However, the primary concern here seems to be the lack of updates to the firewall rules and configurations. Therefore, more broadly, this issue highlights the need for regular reviews and updates of firewall rules and configurations to ensure they are aligned with current security best practices and threats. A. Video surveillance: While important for physical security, it does not directly address the issue of outdated firewall configurations. B. Biometric controls: This also pertains to physical security and access control rather than network security or firewall management. C. Password encryption: While critical for protecting credentials, it does not directly affect firewall configuration management or updates.

The only answer that addresses outdated firewall configurations

Trick question - "physical data center" I believe the mentioning of the firewall is irrelevant as they are talking about physical security. Thus, B is the correct answer.

SSH key rotation involves regularly changing SSH keys to ensure secure access controls are maintained. This practice can help secure the management of firewalls, especially if they haven't been updated or changed in a long time, by preventing unauthorized access due to compromised or outdated keys