Câu 176: CAS-004: CompTIA Advanced Security Practitioner (CASP+) CAS-004

A security architect was asked to modify an existing internal network design to accommodate the following requirements for RDP: ✑ Enforce MFA for RDP. ✑ Ensure RDP connections are only allowed with secure ciphers. The existing network is extremely complex and not well segmented. Because of these limitations, the company has requested that the connections not be restricted by network-level firewalls or ACLs. Which of the following should the security architect recommend to meet these requirements?

1. A. Implement a reverse proxy for remote desktop with a secure cipher configuration enforced.
2. B. Implement a bastion host with a secure cipher configuration enforced.
3. C. Implement a remote desktop gateway server, enforce secure ciphers, and configure to use OTP. — đáp án hiện tại
4. D. Implement a GPO that enforces TLS cipher suites and limits remote desktop access to only VPN users.