System Security Configuration

Correct Answer: Set up a VPN

Setting up a VPN (Virtual Private Network) is the best solution for securely accessing internal resources remotely. A VPN establishes an encrypted tunnel between the employee's device and the organization's network, ensuring that all data transmitted is protected from unauthorized access. Forwarding external IP addresses to internal resources would expose those resources to the internet, making them vulnerable to attacks. Storing sensitive data on employees' local machines is not secure, as those devices may be lost, stolen, or compromised. Turning off all firewalls would remove a critical layer of network security, leaving the organization open to various threats.

Correct Answer: Enable account lockout policy

Enabling an account lockout policy will stop further unauthorized access attempts by locking the account after a certain number of failed attempts. Disconnecting the network or changing the IP address will not necessarily stop the attempts, and other options do not directly address the issue at hand.

Correct Answer: Implement role-based access control

Implementing role-based access control provides users with access rights based on their job responsibilities, ensuring that unauthorized individuals cannot access sensitive data. Giving administrative rights, disabling antivirus, or removing authentication requirements would all compromise security.