Câu 61: CAS-004: CompTIA Advanced Security Practitioner (CASP+) CAS-004

An organization's existing infrastructure includes site-to-site VPNs between datacenters. In the past year, a sophisticated attacker exploited a zero-day vulnerability on the VPN concentrator. Consequently, the Chief Information Security Officer (CISO) is making infrastructure changes to mitigate the risk of service loss should another zero-day exploit be used against the VPN solution. Which of the following designs would be BEST for the CISO to use?

1. A. Adding a second redundant layer of alternate vendor VPN concentrators — đáp án hiện tại
2. B. Using Base64 encoding within the existing site-to-site VPN connections
3. C. Distributing security resources across VPN sites
4. D. Implementing IDS services with each VPN concentrator
5. E. Transitioning to a container-based architecture for site-based services