CompTIA Security+ (SY0-501) — Question 942
A security administrator needs an external vendor to correct an urgent issue with an organization's physical access control system (PACS). The PACS does not currently have internet access because it is running a legacy operation system.
Which of the following methods should the security administrator select the best balances security and efficiency?
Answer options
- A. Temporarily permit outbound internet access for the pacs so desktop sharing can be set up
- B. Have the external vendor come onsite and provide access to the PACS directly
- C. Set up VPN concentrator for the vendor and restrict access to the PACS using desktop sharing
- D. Set up a web conference on the administrator's pc; then remotely connect to the pacs
Correct answer: A
Explanation
Allowing temporary outbound internet access for the PACS enables effective desktop sharing while maintaining some level of security. Having the vendor onsite (option B) could be less efficient and may expose the system to physical security risks. Setting up a VPN (option C) could introduce complexities and might not be secure enough given the legacy system's vulnerabilities. A web conference (option D) does not provide the necessary direct access to resolve the issue efficiently.