CompTIA CASP+ (CAS-003) — Question 374

A security engineer is designing a system in which offshore, outsourced staff can push code from the development environment to the production environment securely. The security engineer is concerned with data loss, while the business does not want to slow down its development process. Which of the following solutions BEST balances security requirements with business need?

Answer options

• A. Set up a VDI environment that prevents copying and pasting to the local workstations of outsourced staff members
• B. Install a client-side VPN on the staff laptops and limit access to the development network
• C. Create an IPSec VPN tunnel from the development network to the office of the outsourced staff
• D. Use remote SaaS to provide administrative sharing in production

Correct answer: B

Explanation

The correct answer is B because installing a client-side VPN allows secure access to the development network while ensuring that data is not transferred outside the controlled environment, thus minimizing the risk of data loss. Option A may restrict usability too much, potentially affecting productivity, while options C and D do not adequately address the data loss concern as effectively as a client-side VPN.