MENU
A conservative company with rigorous risk control plans and internal audit rules has a recurrent problem with a core Business application. As a result access to this application must be restricted and controlled and maintenance must be on-site. However, the company feels that the application must have an emergency service team. The routine maintenance of this solution is provided by an external vendor and the vendor requested 24 hours remote access to quality and production dat
a. In this context what is the company's response to the vendor's request?
Suggested Answer: C
Get Premium CBAP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
38 comments · newest first
CO
Cory
12 months ago
They’ll probably stick to their guns and deny it.
VI
Viva
1 year ago
Wait, they’d actually consider remote access? That’s surprising!
LE
Leatha
1 year ago
No way they’ll give remote access, too risky!
PA
Paola
1 year ago
I think they might accept it, they need help fast!
CE
Cecilia
1 year ago
Definitely denied because of their strict risk policies.
ET
Ettie
1 year ago
I’m torn between A and C. Denying the request seems logical, but if there's an urgent problem, maybe they would accept it just this once?
IR
Irma
1 year ago
This reminds me of a practice question where a vendor's access was denied due to strict internal controls. I feel like that could apply here too.
JA
Jannette
1 year ago
I’m not entirely sure, but I think if the company has a serious issue, they might consider accepting the request despite their usual protocols.
AS
Ashlee
1 year ago
I remember we discussed how risk-averse companies often prioritize security over convenience, so I think the answer might lean towards denying the request.
LA
Lawrence
1 year ago
Hmm, I'm a bit unsure about this one. The wording is a bit confusing, and I want to make sure I understand exactly what they're asking for. Let me re-read it carefully.
BA
Barabara
1 year ago
Okay, I've got an idea. Since the default OWD is Public Read/Write, we need to find a way to override that for the community users. I'm thinking option B, defining an owner-based sharing rule, might be the way to go.
TH
Theron
1 year ago
Okay, let me think this through. I know systemd-journald is the newer logging system, so I'll focus on understanding how it works and how it differs from syslog.
KE
Keith
1 year ago
I have a hunch that modifying the NAT policy might not even be necessary; maybe we just need to check the access policy settings.
LA
Lashon
1 year ago
The vendor must be living in a fantasy land if they think a 'rigorous risk control' company is going to let them remote in. They might as well ask the CEO to hand over their login credentials and social security numbers while they're at it.
PA
Pamella
1 year ago
I'm torn, but I think the company will go with option A. They're all about the risk control, and 24-hour remote access is a big no-no in their world. Guess the vendor will have to pack their bags and come on-site.
GE
Genevieve
1 year ago
C) Denied- because the vendor requested it
BR
Brandon
1 year ago
B) Accepted, because the company has an urgent problem to solve
TA
Tabetha
1 year ago
A) Dented because of the company's risk aversion
RE
Reta
2 years ago
Haha, the vendor is really pushing their luck here. 'Because I asked for it' is definitely not a valid reason for a company this risk-averse. They'll probably respond with a firm 'Denied' and a strongly worded email.
DA
Daren
1 year ago
Haha, the vendor is really pushing their luck here. 'Because I asked for it' is definitely not a valid reason for a company this risk-averse. They'll probably respond with a firm 'Denied' and a strongly worded email.
KA
Karima
1 year ago
The company's security measures are non-negotiable
PA
Pa
1 year ago
A) Dented because of the company's risk aversion
BR
Brett
2 years ago
They won't budge on this one, strict rules in place
JA
Janae
2 years ago
Denied- because the vendor requested it
LE
Lettie
2 years ago
I'm going with option C. No way a conservative company like this is going to give remote access to their production data, no matter how urgent the problem is. Security trumps convenience.
RU
Rutha
1 year ago
C) Denied- because the vendor requested it
VA
Vannessa
1 year ago
B) Accepted, because the company has an urgent problem to solve
CA
Casandra
1 year ago
A) Dented because of the company's risk aversion
BE
Bernardine
1 year ago
I understand the concern, but sometimes you have to weigh the risks against the benefits.
CL
Clay
1 year ago
Even then, I think the risk is too high to grant remote access.
SI
Silvana
1 year ago
But what if the issue is critical and needs immediate attention?
MA
Marshall
1 year ago
I agree, security should always come first.
CA
Cammy
2 years ago
This is a tricky one. The company's risk aversion and strict internal policies make me think they'll deny the vendor's request. But if the issue is really that urgent, they might make an exception.
LO
Lorean
1 year ago
B) Accepted, because the company has an urgent problem to solve
EL
Elise
2 years ago
A) Dented because of the company's risk aversion
CH
Cherilyn
2 years ago
That's true, maybe the company will accept it for that reason.
DE
Delpha
2 years ago
But what if the vendor needs immediate access to fix the problem?
CH
Cherilyn
2 years ago
I think the company will deny the vendor's request.