Explanation/Reference:
Explanation:
DNS is utilized primarily on the Internet for resolution of the name/address of the web site. It is an Internet service that translates domain names into IP addresses. As names are alphabetic, they are easier to remember. However, the Internet is based on IP addresses. Every time a domain name is used, a DNS service must translate the name into the corresponding IP address. The DNS system has its own network, if one DNS server does not know how to translate a particular domain name, it asks another one, and so on, until the correct IP address is returned.

Section: Information System Acquisition, Development and Implementation

The most efficient solution for a multi-location healthcare organization that wants to be able to access patient data wherever patients present themselves for care is B. Software as a Service (SaaS) provider. SaaS providers offer cloud-based services that allow organizations to access applications, data, and infrastructure on demand, making it easier to access patient data no matter where the patient is located. Reference: ISACA CISA Study Manual, section 5.3.3.1.

Section: Protection of Information Assets
Explanation:
An application-level gateway is the best way to protect against hacking because it can define with detail
rules that describe the type of user or connection that is or is not permitted, it analyzes in detail each
package, not only in layers one through four of the OSI model but also layers five through seven, which
means that it reviews the commands of each higher-level protocol (HTTP, FTP, SNMP, etc.). For a remote
access server, there is a device (server) that asks for a username and password before entering the
network. This is good when accessing private networks, but it can be mapped or scanned from the Internet
creating security exposure. Proxy servers can provide protection based on the IP address and ports.
However, an individual is needed who really knows how to do this, and applications can use different ports
for the different sections of the program. Port scanning works when there is a very specific task to
complete, but not when trying to control what comes from the Internet, or when all the ports available need
to be controlled. For example, the port for Ping (echo request) could be blocked and the IP addresses
would be available for the application and browsing, but would not respond to Ping.