Discuss GIAC GSNA Exam Topic 1 Question 60

You work as a Network Administrator for InfraTech Inc. You have been assigned the task of designing the firewall policy for the company. Which of the following statements can be considered acceptable in the 'contracted worker statement' portion of the firewall policy?

Each correct answer represents a complete solution. Choose all that apply.

ANo contractors shall have access to the authorized resources.

BNo contractors shall be permitted to scan the network.

CNo contractors shall have access to the unauthorized resources.

DNo contractors can access FTP unless specifically granted permissions to use it.

Suggested Answer: B, C, D

There are different portions that can be included in the firewall policy. These portions include the acceptable use statement, the network connection statement, the contracted worker statement, and the firewall administrator statement. The contracted worker statement portion of the policy is related to the contracted or the temporary workers. It states the rights and permissions for these workers. Some of the items hat can be included in this portion are as follows:

No contractors can use FTP unless specifically granted to use it.

No contractors shall have access to TELNET unless specifically granted to use it.

No contractors shall have access to unauthorized resources.

No contractors shall have access to scan the network.

Answer A is incorrect. Only authorized resources should be accessed by the contractors.

Get Premium GSNA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

28 comments · newest first

Simona 10 months ago

D makes sense, but what if they need FTP for their work?

Xuan 11 months ago

I can't believe A is even an option!

Jules 11 months ago

C seems obvious, right?

Ahmad 11 months ago

B and D are definitely necessary!

Edna 11 months ago

A is too strict, contractors need some access.

Barbra 11 months ago

I feel like option B is definitely a good choice; scanning the network could lead to security risks.

Burma 12 months ago

I'm not entirely sure about option D. It seems reasonable, but what if they need FTP for legitimate reasons?

Adolph 12 months ago

I remember a practice question where we discussed limiting access to unauthorized resources, so I feel like option C could be correct.

Janae 12 months ago

I think option A is too strict; contractors might need some access to do their jobs, right?

Mitsue 12 months ago

I feel confident about this one. The statements about restricting access for contractors and limiting specific protocols like FTP are exactly the kind of thing I'd expect to see in a firewall policy.

Darrin 12 months ago

Okay, I've got this. The key is to focus on restricting access for contractors while still allowing necessary functionality. Options B and D look good to me.

Moon 12 months ago

Hmm, I'm a bit unsure about this one. I need to think through the implications of each statement and make sure I understand the context.

Lashunda 1 year ago

This seems like a straightforward firewall policy question. I'll carefully read through the options and select the ones that seem most appropriate.

Mitsue 1 year ago

I'm a little confused by the wording of some of these statements. I'll need to double-check my understanding of firewall policies to make sure I'm selecting the right answers.

Ashlyn 1 year ago

The exception handling is definitely a concern here. I'll need to make sure I understand the implications of that.

Lucina 2 years ago

All of these options sound good to me. Might as well cover all the bases! Although, I do prefer a good old-fashioned carrier pigeon for secure file transfers. Just saying.

Shaun 2 years ago

I'm going with B, C, and D. Can't be too careful with contractors, you know? Better safe than sorry when it comes to network security.

Emeline 2 years ago

↳ replying to Shaun

Scanning the network should definitely be off-limits for contractors.

Jutta 2 years ago

↳ replying to Shaun

I think contractors should only access FTP if they have specific permissions.

Myra 2 years ago

↳ replying to Shaun

I agree, contractors should not have access to unauthorized resources.

Merrilee 2 years ago

I agree with Effie. Option B and D are the way to go. No need to be overly restrictive - just keep things secure and controlled.

Effie 2 years ago

B and D seem like the most reasonable options. We don't want contractors scanning the network or accessing unauthorized resources, but allowing access to authorized FTP with permission makes sense.

Arlie 2 years ago

↳ replying to Effie

Agreed, those options seem like the best choices to include in the firewall policy.

Latosha 2 years ago

↳ replying to Effie

D) No contractors can access FTP unless specifically granted permissions to use it.

Tegan 2 years ago

↳ replying to Effie

B) No contractors shall be permitted to scan the network.

Leota 2 years ago

I think option C is not necessary as contractors should not have access to unauthorized resources anyway.

Natalie 2 years ago

I agree with Adelina. Option D is also important to control access to FTP.

Adelina 2 years ago

I think option A is acceptable because we need to restrict access to authorized resources.

GIAC GSNA Exam - Topic 1 Question 60 Discussion