CAS-004 practice question 17 of 35

A development team needs terminal access to preproduction servers to verify settings and enter purchased license keys. To address the team’s needs…

Full set: 610 questions

A development team needs terminal access to preproduction servers to verify settings and enter purchased license keys. To address the team’s needs, the security administrator implements the following requirements:

•Only trusted accounts can access the preproduction servers.

•Developers cannot access the preproduction servers directly from their workstations.

•The trusted accounts should only have access to specific preproduction servers.

Which of the following are necessary to fulfill the security requirements? (Select two).

Answer options
A: SSL VPN
B: NAT gateway
C: Air gap
D: WAF
E: Jump box Correct answer
F: Network ACLs Correct answer
Correct Answer:
E. Jump box; F. Network ACLs
Explanation

•Jump box: Acts as an intermediary that allows secure access to preproduction servers while enforcing access controls. •Network ACLs: Restrict access to only trusted accounts and specified preproduction servers. This aligns with CASP+ objectives 2.2 and 3.4, which focus on securing access and implementing appropriate controls for sensitive environments. ________________________________________

Scroll to Top