CompTIA CASP+ (CAS-004) — Question 618

A healthcare system recently suffered from a ransomware incident. As a result, the board of directors decided to hire a security consultant to improve existing network security. The security consultant found that the healthcare network was completely flat, had no privileged access limits, and had open RDP access to servers with personal health information. As the consultant builds the remediation plan, which of the following solutions would BEST solve these challenges?
(Choose three.)

Answer options

• A. SD-WAN
• B. PAM
• C. Remote access VPN
• D. MFA
• E. Network segmentation
• F. BGP
• G. NAC

Correct answer: B, C, E

Explanation

The correct answers, PAM, Remote access VPN, and Network segmentation, are essential for enhancing security in this scenario. PAM restricts access to sensitive systems, Remote access VPN secures remote connections, and Network segmentation limits the spread of potential threats. The other options, while useful in different contexts, do not directly address the specific vulnerabilities identified by the consultant.