Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CSA CCSK Exam - Topic 9 Question 30 Discussion

Posted by Daron on Jun 18, 2022 at 11:10 PM

ENISA: Lock-in is ranked as a high risk in ENISA research, a key underlying vulnerability causing lock in is:

Suggested Answer: A

Get Premium CCSK Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
15 comments · newest first
QU
Quentin 11 months ago
Jurisdiction info is often overlooked, but it's super important!
JO
Jody 11 months ago
Audit or certification not being available is a huge red flag.
AL
Alison 12 months ago
Wait, no source escrow agreement? That sounds risky!
RA
Rashad 12 months ago
I disagree, I believe unclear asset ownership is the bigger issue.
EL
Elliott 12 months ago
Definitely think it's about lack of completeness and transparency.
NI
Nickolas 1 year ago
I vaguely remember that no source escrow agreement could lead to significant lock-in issues, but I’m not confident it’s the right answer here.
WE
Wei 1 year ago
I feel like the lack of completeness and transparency in terms of use is a big factor too, but I can't recall if it was ranked as the highest risk.
CU
Curtis 1 year ago
I think it might be related to unclear asset ownership. That seems to come up a lot in similar practice questions.
DA
Danilo 1 year ago
I remember discussing lock-in risks in class, but I'm not sure which specific vulnerability is ranked highest.
TO
Tomas 1 year ago
Hmm, this looks like a tricky one. I'll need to think through the naming convention carefully.
ST
Stephaine 1 year ago
Okay, the key details I see are that the firewall rule is rejecting traffic on port 22. I just need to determine if it's a distributed firewall or a gateway firewall, and which servers/gateways it's applied to.
MA
Marjory 1 year ago
This is a tricky one. I'm not super familiar with the Palo Alto dynamic address group feature, so I'll have to make an educated guess. I think VM Monitoring and XML API might be the two options, but I'm not 100% sure. I'll review the documentation again to double-check.
HE
Helene 1 year ago
This looks like a pretty straightforward configuration issue. I think I can handle this by carefully going through each of the violations and making the necessary changes to the configuration files.
JE
Jennie 1 year ago
Hmm, I'm a bit unsure about this one. The question is asking about the specifics of the 'Printenv' vulnerability, and I'm not entirely familiar with that. I'll need to think it through carefully.
KA
Karina 1 year ago
Okay, I think I know the answer here. The Monitoring service and the Configuration Logging service both have additional connections to a secondary database, right?
0/2000 characters

Save Cancel