easyMultiple ChoiceObjective-mapped
CRISC Practice Question: Refer to the exhibit
Exhibit
Firewall Rule Configuration: Rule 10: Allow TCP 3389 from 192.168.1.0/24 to 10.0.0.5
Refer to the exhibit. Which risk is MOST directly identified?
⚠ Common exam trap
The trap here is that candidates may misinterpret a network diagram or ACL as indicating a denial of service vulnerability (Option A) because they focus on the inbound traffic volume or source, rather than recognizing that the specific risk is the exposure of a management interface to unauthorized remote access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Unauthorized remote access to a critical server
The exhibit (not shown) likely depicts a network diagram or access control list (ACL) configuration that allows inbound traffic from the internet to a critical server on a restricted port (e.g., RDP on TCP 3389 or SSH on TCP 22). This directly identifies the risk of unauthorized remote access, as an attacker could exploit this exposed management interface to gain control of the server. The other options are not directly indicated by such a configuration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Denial of service vulnerability
Why it's wrong here
The rule is permissive, not directly DoS related.
- ✗
Malware propagation across subnets
Why it's wrong here
The rule does not specifically address malware propagation.
- ✗
Weak password policy
Why it's wrong here
Password policy is not shown in the rule.
- ✓
Unauthorized remote access to a critical server
Why this is correct
Allowing RDP from a broad range increases unauthorized access risk.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every CRISC question from scratch — 983 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.