Which of the following would most likely prevent exploitation of an end-of-life, business-critical system?
Isolation would most likely prevent exploitation of an end-of-life, business-critical system.
Isolating an end-of-life system from the network and other systems significantly reduces the risk of unauthorized access and exploitation. By preventing connectivity, the vulnerabilities inherent in outdated software and hardware can be contained, ensuring that potential attackers have no pathway to exploit the system.
Monitoring involves keeping an eye on system activity to detect potential security incidents. While it is essential for identifying threats, it does not actively prevent exploitation. An end-of-life system may still be vulnerable to attacks even if it is monitored, as the underlying security flaws remain unaddressed.
Decommissioning refers to the process of formally retiring a system. While this action effectively eliminates the risk of exploitation by removing the system entirely, it is not a preventive measure during the system's operational phase. Decommissioning is a final step, and until it occurs, the system may still be exposed to threats.
Encryption protects data by encoding it, making it unreadable without the appropriate keys. However, encryption does not address vulnerabilities in the system itself. An end-of-life system can still be exploited if it has unpatched security holes, regardless of whether the data is encrypted.
To effectively prevent exploitation of an end-of-life, business-critical system, isolation serves as the most reliable strategy. By physically or logically separating the system from other networked resources, organizations can mitigate risks associated with known vulnerabilities. Other measures like monitoring, decommissioning, and encryption can complement security efforts but do not provide the same level of preventive protection as isolation does.
Related Questions
View allWhich of the following best describes a common use of OSINT?
Which of the following digital forensics activities would a security t...
A site reliability engineer is designing a recovery strategy that requ...
Which of the following teams combines both offensive and defensive tes...
A network administrator wants to ensure that network traffic is highly...
Related Quizzes
View allCompTIA A Plus Certification Exam
CompTIA A Plus Exam Questions
CompTIA A Plus 1001 Exams Practice
CompTIA A Plus Practice Exam
CompTIA CySA+ Cybersecurity Analyst Certification all in One Exam Guide
CompTIA Network Plus Certification Exam Quiz
CompTIA Security Plus Exam Answers
CompTIA Security Plus Simulation Questions
CompTIA Security Plus 501 Practice Questions
CompTIA Security Plus Example Questions
- ✓ 500+ Practice Questions
- ✓ Detailed Explanations
- ✓ Progress Analytics
- ✓ Exam Simulations