An organization just merged with an organization in another legal jurisdiction and must improve its network security posture in ways that do not require additional resources to implement data isolation. One recommendation is to block communication between endpoint PCs. Which of the following would be the BEST solution?
A. Installing HIDS
B. Configuring a host-based firewall
C. Configuring EDR
D. Implementing network segmentation
How to PASS CAS-004 in First Attempt?FULL Printable PDF and Software. VALID exam to help you PASS. |
 |
Host based firewalls do not require additional resources. They are built into the OS. Windows, MacOS, Linux, FreeBSD, OpenBSD, all have a builtin firewall.
Firewalls are specifically made to block unwanted communications. That is their whole reason to exist.
D is the only one that doesn’t require additional resources to implement.
“Do not require additional resources”. We know they have a network. Firewall may or may not exist but if needed requires additional resources. I’d say D
I would stick with D on this one simply because of the question mentions ‘Data Isolation’. One benefit of implementing network segmentation would be isolation of traffic.
B. Configuring a host-based firewall – Can block communication