Free CMMC-CCA Web TestEngine Demo

Q66 Single choice

You have been hired to assess a contractor's implementation of remote access capabilities for information systems that handle CUI. While interviewing the network administrator, you realize they perform privileged activities remotely when at alternate worksites.

Which of the following is the BEST action the contractor can take to address the network administrator's remote execution of privileged activities, as per CMMC practice AC.L2-3.1.15 - Privileged Remote Access?

A
Implement multifactor authentication before authorizing remote access sessions, regardless of privilege level
B
Prohibit the remote execution of privileged commands and remote access to security-relevant information entirely
C
Log and monitor all remote sessions
D
Limit remote access privileges to read-only activities and prohibit any remote execution of privileged commands

CMMC-CCA Web TestEngine demo