Exam CAS-004 topic 1 question 360 discussion

Actual exam question from CompTIA's CAS-004

Question #: 360
Topic #: 1

A consultant needs access to a customer's cloud environment. The customer wants to enforce the following engagement requirements:

• All customer data must remain under the control of the customer at all times.
• Third-party access to the customer environment must be controlled by the customer.
• Authentication credentials and access control must be under the customer's control.

Which of the following should the consultant do to ensure all customer requirements are satisfied when accessing the cloud environment?

A. Use the customer's SSO with read-only credentials and share data using the customer's provisioned secure network storage.
B. Use the customer-provided VDI solution to perform work on the customer's environment.
C. Provide code snippets to the customer and have the customer run code and securely deliver its output.
D. Request API credentials from the customer and only use API calls to access the customer's environment.

Show Suggested Answer

Suggested Answer: B 🗳️

by CXSSP at Sept. 25, 2023, 3:57 a.m.

Comments

Submit Cancel

Bright07

7 months ago

Selected Answer: A

Use the customer's SSO with read-only credentials and share data using the customer's provisioned secure network storage. Analysis: SSO (Single Sign-On) allows the customer to control the authentication credentials. If the consultant uses read-only access, this ensures the consultant cannot modify customer data. Sharing data via the customer's secure network storage ensures that customer data is controlled by the customer and does not leave the customer’s environment. NOT B.

upvoted 1 times

Bright07

7 months ago

After careful consideration, I change my mind to B. Because All customer data must remain under the control of the customer at all times. Third-party access to the customer environment must be controlled by the customer. Authentication credentials and access control must be under the customer's control. Then Option B. Customer-provided VDI (Virtual Desktop Infrastructure): ensures that the consultant works directly in the customer's environment, without moving or copying data outside of it. This maintains data control because all work is done within the customer's environment, and no external storage or systems are involved. And also, Access Control: The customer controls the VDI solution, which means they manage and enforce the access control and authentication, ensuring the consultant’s access is properly regulated.

upvoted 2 times

...

23169fd

12 months ago

Selected Answer: B

Customer Control: By using a VDI solution provided by the customer, all operations performed by the consultant are conducted within a controlled environment managed by the customer. This ensures that all customer data remains under the control of the customer at all times. Access Control: The customer can control and monitor third-party access to their environment through the VDI. The customer can also enforce authentication credentials and access control policies on the VDI, ensuring that only authorized access is permitted. Security: The VDI setup ensures that data does not leave the customer's environment, maintaining the security and confidentiality of the customer’s data.

upvoted 2 times

...

e4af987

1 year, 3 months ago

Selected Answer: D

Although I wanted to agree with B - the key is that the consultant needs access to the "envioronment" - not the data.

upvoted 1 times

...

OdinAtlasSteel

1 year, 8 months ago

Selected Answer: B

While both Option B and Option D could be considered, in a CompTIA exam, the use of a VDI solution is a more common and widely accepted practice for secure remote access and collaboration, aligning with industry best practices.

upvoted 2 times

...

weaponxcel

1 year, 8 months ago

Selected Answer: B

B. Use the customer-provided VDI solution to perform work on the customer's environment: Virtual Desktop Infrastructure (VDI) allows the consultant to work within a virtualized environment controlled by the customer. All data remains within the customer's environment, and access is controlled by the customer.

upvoted 1 times

...

CXSSP

1 year, 9 months ago

Selected Answer: B

B. Use the customer-provided VDI solution to perform work on the customer's environmen

upvoted 1 times

...