A Security Engineer Is Designing a System in Which Offshore

question 59

Multiple Choice

A security engineer is designing a system in which offshore, outsourced staff can push code from the development environment to the production environment securely. The security engineer is concerned with data loss, while the business does not want to slow down its development process. Which of the following solutions BEST balances security requirements with business need?

• A) Set up a VDI environment that prevents copying and pasting to the local workstations of outsourced staff members
• B) Install a client-side VPN on the staff laptops and limit access to the development network
• C) Create an IPSec VPN tunnel from the development network to the office of the outsourced staff
• D) Use online collaboration tools to initiate workstation-sharing sessions with local staff who have access to the development network

---

Definitions:

Straight-Line Method

A depreciation technique that allocates an equal portion of an asset’s cost to each year of its useful life.

Residual Value

The estimated value of a fixed asset at the end of its useful life, reflecting what it could be sold for or its disposal cost.

Depreciation

An accounting method of allocation that spreads the cost of an asset over its useful life to account for its decrease in value over time.

Book Value

The net value of a company's assets minus its liabilities, often used to assess a company's worth.