Exam SY0-701 topic 1 question 102 discussion

The word "legacy" should inform that this action is compensating.

D. Compensating controls The actions taken by the organization—disabling unneeded services and placing a firewall in front of a business-critical legacy system—are examples of compensating controls. Compensating controls are security measures that are implemented to mitigate risk when the primary controls are not feasible or sufficient. In this case, since the legacy system might have inherent vulnerabilities that cannot be fully addressed, the organization has implemented additional controls to reduce the risk. Therefore, the correct answer is: D. Compensating controls

By implementing compensating controls (disabling unneeded services and using a firewall), the organization is mitigating the risks associated with the legacy system in the absence of being able to fully secure it through traditional means.

Segmentation means seperate, you're not seperating anything. You're disabling one thing and inputting something else to implement additional security. D is correct.

Compensating controls is the best choice because the actions taken by the organization are intended to mitigate the risks associated with a legacy system when more standard security measures cannot be applied. By implementing these alternative controls, the organization effectively enhances the security of the legacy system without requiring direct updates or changes to its structure.

best describes the "actions taken"?? Segmentation is the action taken by the organisation to have Compensating controls. B is the corect answer. Hope that helps.

It is a business critical legacy system - i would go with D Dompensationg controls

The actions taken by the organization best describe D. Compensating controls. These measures are implemented to mitigate potential risks associated with the legacy system, ensuring its security despite inherent vulnerabilities.

Compensating controls are alternative measures implemented to mitigate the risk of a vulnerability when the primary controls cannot be applied. In this scenario, the organization has: Disabled unneeded services: This reduces the attack surface of the legacy system, limiting potential vulnerabilities. Placed a firewall in front of the system: This provides an additional layer of security, controlling and monitoring the traffic to and from the legacy system.

D - Compensating controls