Exam CS0-002 topic 1 question 156 discussion

Actual exam question from CompTIA's CS0-002

Question #: 156
Topic #: 1

A company's security team recently discovered a number of workstations that are at the end of life. The workstation vendor informs the team that the product is no longer supported, and patches are no longer available. The company is not prepared to cease its use of these workstations. Which of the following would be the
BEST method to protect these workstations from threats?

A. Deploy whitelisting to the identified workstations to limit the attack surface.
B. Determine the system process criticality and document it.
C. Isolate the workstations and air gap them when it is feasible.
D. Increase security monitoring on the workstations.

Show Suggested Answer

Suggested Answer: C 🗳️

by Cizzla7049 at Sept. 22, 2022, 1:42 a.m.

Comments

Submit Cancel

RobV

1 year, 6 months ago

Selected Answer: C

C. Isolate the workstations and air gap them when it is feasible.

upvoted 2 times

...

skibby16

1 year, 7 months ago

Selected Answer: A

Deploying whitelisting to the identified workstations would be the best method to protect these workstations from threats. Whitelisting is a technique that allows only authorized applications, processes, or users to run or access a system or resource. Whitelisting can help limit the attack surface and prevent malware or unauthorized software from running on a system. Deploying whitelisting to the workstations that are at the end of life can help mitigate the risk of exploitation due to lack of patches or support from the vendor.

upvoted 1 times

...

Tag

2 years, 8 months ago

Selected Answer: C

An air gap, air wall, air gapping or disconnected network is a network security measure employed on one or more computers to ensure that a secure computer network is physically isolated from unsecured networks, such as the public Internet or an unsecured local area network.

upvoted 2 times