Exam SY0-701 topic 1 question 197 discussion

B. Placing the system in an isolated VLAN Give that the system is critical for processing customer transactions, decommissioning immediately might impact business continuity. The next best approach is to place the system in an isolated VLAN.

Why would you "Decommission the system" when it is critical for transitions? The answer is B, Isolate it until you're ready to make the relevant changes or ready to replace it.

C. Decommissioning the system The most secure option is to decommission the system entirely. End-of-life systems are no longer supported by the vendor, meaning they will not receive security patches. This makes them highly vulnerable to attacks. By decommissioning the system, the organization can eliminate the risk associated with it. While the other options may provide some level of security, they do not address the fundamental issue of the system being end-of-life.

Yes it is critical so it should be replaced soon, VLAN can be short term

The best technique to increase enterprise security in this situation is: B. Placing the system in an isolated VLAN By placing the system in an isolated VLAN, the organization can reduce the risk of the outdated system being exploited by limiting its network exposure and controlling access to and from the critical system. This helps to minimize the impact that vulnerabilities in the end-of-life operating system could have on the broader network.

Placing the system in an isolated VLAN: This will physically separate the critical system from the rest of the network, reducing the risk of unauthorized access or attacks. Installing HIDS on the system: While an HIDS can detect and alert on suspicious activity, it might not be enough to mitigate the risks associated with an end-of-life operating system, which lacks security updates and patches. Decommissioning the system: This is a potential solution if the system can be replaced with a more secure alternative. However, if the system is critical for business operations, decommissioning it might not be feasible. Encrypting the system's hard drive: Encryption can protect the data stored on the system, but it doesn't address the security vulnerabilities associated with an end-of-life operating system.

techniques would increase "enterprise" security. you can use system but system can't connect with other devices on network

Yes, decommissioning the system is generally the most effective approach for addressing the security risks associated with running an end-of-life operating system. GPT