CompTIA CASP+ (CAS-004) — Question 134

An HVAC contractor requested network connectivity permission to remotely support/troubleshoot equipment issues at a company location. Currently, the company does not have a process that allows vendors remote access to the corporate network. Which of the following solutions represents the BEST course of action to allow the contractor access?

Answer options

• A. Add the vendor's equipment to the existing network. Give the vendor access through the standard corporate VPN.
• B. Give the vendor a standard desktop PC to attach the equipment to. Give the vendor access through the standard corporate VPN.
• C. Establish a certification process for the vendor. Allow certified vendors access to the VDI to monitor and maintain the HVAC equipment.
• D. Create a dedicated segment with no access to the corporate network. Implement dedicated VPN hardware for vendor access.

Correct answer: D

Explanation

The correct answer is D because it ensures that the contractor has a dedicated access point that isolates their activity from the corporate network, reducing security risks. Options A and B compromise network security by integrating vendor equipment directly into the corporate network, while option C does not provide the immediate solution needed for remote access.