Which solution is offered by third parties and can be hosted inside or outside the network, with a drawback that attackers can audit from outside?

Which solution is offered by third parties and can be hosted inside or outside the network, with a drawback that attackers can audit from outside?

• A. Product-Based Solutions
• B. Depth Assessment Tools
• C. Service-Based Solutions
• D. Tree-Based Assessment

Answer: (A)

Product-based solutions are packaged offerings from vendors that you can deploy in your own environment or have hosted by a third party. The flexibility to host inside the network or outside it makes them appealing, but the trade-off is exposure: when the tool is hosted externally, its management interfaces and data can be reachable from the internet, meaning attackers outside your network could potentially audit or probe the tool and the assets it monitors. This external accessibility is the main drawback of third-party product-based solutions when they’re not kept entirely behind your own perimeter. The other options don’t fit as well because they describe different delivery models or assessment approaches that don’t emphasize a vendor-packaged product you install or host, either internally or externally, with the same external-audit risk.

Product-based solutions are packaged offerings from vendors that you can deploy in your own environment or have hosted by a third party. The flexibility to host inside the network or outside it makes them appealing, but the trade-off is exposure: when the tool is hosted externally, its management interfaces and data can be reachable from the internet, meaning attackers outside your network could potentially audit or probe the tool and the assets it monitors. This external accessibility is the main drawback of third-party product-based solutions when they’re not kept entirely behind your own perimeter. The other options don’t fit as well because they describe different delivery models or assessment approaches that don’t emphasize a vendor-packaged product you install or host, either internally or externally, with the same external-audit risk.