CAS-004 Exam - Question 360

Question

A consultant needs access to a customer's cloud environment. The customer wants to enforce the following engagement requirements:

• All customer data must remain under the control of the customer at all times.

• Third-party access to the customer environment must be controlled by the customer.

• Authentication credentials and access control must be under the customer's control.

Which of the following should the consultant do to ensure all customer requirements are satisfied when accessing the cloud environment?

Examice · Accepted Answer

Using the customer-provided Virtual Desktop Infrastructure (VDI) solution allows the consultant to perform tasks within a controlled virtual environment managed by the customer. This setup ensures that all customer data remains under the control of the customer, third-party access is managed by the customer, and authentication credentials and access control mechanisms are maintained by the customer. This approach satisfies all the specified engagement requirements.

OdinAtlasSteel · Answer

While both Option B and Option D could be considered, in a CompTIA exam, the use of a VDI solution is a more common and widely accepted practice for secure remote access and collaboration, aligning with industry best practices.

CXSSP · Answer

B. Use the customer-provided VDI solution to perform work on the customer's environmen

weaponxcel · Answer

B. Use the customer-provided VDI solution to perform work on the customer's environment:

Virtual Desktop Infrastructure (VDI) allows the consultant to work within a virtualized environment controlled by the customer. All data remains within the customer's environment, and access is controlled by the customer.

e4af987 · Answer

Although I wanted to agree with B - the key is that the consultant needs access to the "envioronment" - not the data.

23169fd · Answer

Customer Control: By using a VDI solution provided by the customer, all operations performed by the consultant are conducted within a controlled environment managed by the customer. This ensures that all customer data remains under the control of the customer at all times.
Access Control: The customer can control and monitor third-party access to their environment through the VDI. The customer can also enforce authentication credentials and access control policies on the VDI, ensuring that only authorized access is permitted.
Security: The VDI setup ensures that data does not leave the customer's environment, maintaining the security and confidentiality of the customer’s data.

CAS-004 Exam - Question 360

Discussion