Exam SY0-701 Topic 1 Question 568 Discussion

Actual exam question for CompTIA's SY0-701 exam
Question #: 568
Topic #: 1

A security engineer must deploy a sensor to actively monitor a closed network. The company's enterprise SIEM is located in the cloud, and there is a strict policy against connecting this network to the internet. Which of the following will best address these requirements?

A. Place the sensor on the edge router of the closed network, open port 22 on the management interface, and create a secure connection to the cloud SIEM while using an Implicit deny rule to restrict traffic. B. Connect the sensor to the closed network router's span port, install a one-way data diode, and pass traffic to the sensor on the enterprise network for inclusion in the enterprise log data. C. Install a log server on the closed network, point all network and system logs to the log server, and perform weekly manual audits of the logs to meet regulatory compliance objectives. D. Install the sensor on the internal closed network, add a firewall to the sensor stack, and connect the firewall to the corporate ISP while using strict ACLs to prevent egress traffic.

Comments

0 Community Members

0 Shares

0 Demo Downloads

10 Years in Business