Exam 220-1002 topic 1 question 34 discussion

Actual exam question from CompTIA's 220-1002

Question #: 34
Topic #: 1

A manager requests remote access to a server after hours and on weekends to check data. The manager insists on using the server.
Before granting the access, which of the following is the MOST important step a technician can take to protect against possible infection?

A. Create a policy to remove Internet access from the server during off hours
B. Set the local antivirus software on the server to update and scan daily
C. Ensure the server is patched with the latest security updates
D. Educate the manager on safe Internet browsing practices

Show Suggested Answer

Suggested Answer: C 🗳️

by Ptera at Feb. 28, 2020, 11:08 p.m.

Comments

Submit Cancel

betty_boop

Highly Voted 5 years ago

This one's also on Dion's Udemy exams, he agrees the answer is C. Ensure the server is patched with the latest security updates. OBJ-2.7: To prevent infection, it is important that all servers and workstations remain patched and up to date on their security updates. After that, the next best thing would be to set up the anti-virus to automatically update itself daily and run a full scan nightly. Beyond that, educating your supervisor would be a good idea, as well.

upvoted 25 times

...

Dane_d

Highly Voted 5 years, 5 months ago

They are wrong elsewhere, the antivirus updates can be included in the security patches, as well as any other features you might wanna add; be it blocking of some or all sites, restricting certain actions, whatever the case. Hopefully that makes sense ass to why the one on here is correct.

upvoted 6 times

...

Some_Random_Nerd

Most Recent 3 years, 1 month ago

Make Note that the Anti-virus answer choice says to do virus scans DAILY. - which is not as effective as realtime/on access scanning. Remember to select the answer that CompTIA wants, not what you think. According to the official CompTIA Prayer guide and songbook, on page 370, under the section for reducing the risk of malware, the steps are listed with apply OS patches first, and then install antivirus updates and configure ON ACCESS(Realtime) scans. and THEN educate your users. in other words, OS updates are number 1.

upvoted 2 times

EgbonAdugbo

5 months, 2 weeks ago

How can one get this book?

upvoted 1 times

...

MelvinJohn

4 years, 9 months ago

A - The internet is the primary source of “possible infection.” The question says that the manager wants “to check data.” If the data was on the internet, it could be checked from home - no need to check it from the server. So disable internet access on the server during off hours. B, C, and D are also steps that should be taken, but most important is remove access to the internet during off hours.

upvoted 1 times

nischal123

4 years, 9 months ago

The manager wants to access the server anyway remotely so you can't disable internet, in this case the best action you can take is to patch with latest updates to minimize the risk of intruders getting into the server.

upvoted 7 times

...

ruddy_18

3 years, 10 months ago

without internet the manager cant connect remotely.

upvoted 2 times

...

JustinGonnaPassThis

5 years, 3 months ago

Definitely all reasonable suggestions, but as Dane_d said, the security patches are the best all-encompassing solution to the described after-hours scenario.

upvoted 2 times

...