CompTIA CASP+ (CAS-003) — Question 308

A company is migrating systems from an on-premises facility to a third-party managed datacenter. For continuity of operations and business agility, remote access to all hardware platforms must be available at all times. Access controls need to be very robust and provide an audit trail. Which of the following security controls will meet the company's objectives? (Choose two.)

Answer options

• A. Integrated platform management interfaces are configured to allow access only via SSH
• B. Access to hardware platforms is restricted to the systems administrator's IP address
• C. Access is captured in event logs that include source address, time stamp, and outcome
• D. The IP addresses of server management interfaces are located within the company's extranet
• E. Access is limited to interactive logins on the VDi
• F. Application logs are hashed cryptographically and sent to the SIEM

Correct answer: A, C

Explanation

Options A and C are correct because they ensure secure access via SSH and maintain a detailed audit trail of access attempts, respectively. Options B and D limit access unnecessarily, while E restricts access types, and F does not specifically address the requirement for real-time remote access to hardware platforms.