ANS-C01 · Question #33
A network engineer must provide additional safeguards to protect encrypted data at Application Load Balancers (ALBs) through the use of a unique random session key. What should the network engineer…
The correct answer is D. Change the ALB security policy to a policy that supports forward secrecy (FS). Perfect Forward Secrecy is a feature that provides additional safeguards against the eavesdropping of encrypted data, through the use of a unique random session key. This prevents the decoding of captured data, even if the secret long-term key is compromised…
Question
A network engineer must provide additional safeguards to protect encrypted data at Application Load Balancers (ALBs) through the use of a unique random session key. What should the network engineer do to meet this requirement?
Options
- AChange the ALB security policy to a policy that supports TLS 1.2 protocol only
- BUse AWS Key Management Service (AWS KMS) to encrypt session keys
- CAssociate an AWS WAF web ACL with the ALBs. and create a security rule to enforce forward
- DChange the ALB security policy to a policy that supports forward secrecy (FS)
How the community answered
(50 responses)- A16% (8)
- B4% (2)
- C10% (5)
- D70% (35)
Explanation
Perfect Forward Secrecy is a feature that provides additional safeguards against the eavesdropping of encrypted data, through the use of a unique random session key. This prevents the decoding of captured data, even if the secret long-term key is compromised. https://aws.amazon.com/about-aws/whats-new/2014/02/19/elastic-load-balancing-perfect- forward-secrecy-and-more-new-security-features/ https://aws.amazon.com/about-aws/whats-new/2018/06/application-load-balancer-adds-new- security-policies-including-policy-for-forward-secrecy/
Topics
Community Discussion
No community discussion yet for this question.