CompTIA Security+ (SY0-501) — Question 215

A vice president at a manufacturing organization is concerned about desktops being connected to the network. Employees need to log onto the desktops' local account to verify that a product is being created within specifications; otherwise, the desktops should be as isolated as possible. Which of the following is the
BEST way to accomplish this?

Answer options

• A. Put the desktops in the DMZ.
• B. Create a separate VLAN for the desktops.
• C. Air gap the desktops.
• D. Join the desktops to an ad-hoc network.

Correct answer: C

Explanation

The best approach is to air gap the desktops, which means completely isolating them from the network to ensure no external access. Options A and B still allow for some network connectivity, which contradicts the isolation requirement. Option D suggests using an ad-hoc network, which also doesn't provide the necessary security and isolation.