Due to a new regulatory requirement, ABC Company must now encrypt all WAN transmissions. When speaking with the network administrator, the security administrator learns that the existing routers…

Question

Options

• ADeploy inline network encryption devices
• BInstall an SSL acceleration appliance
• CRequire all core business applications to use encryption
• DAdd an encryption module to the router and configure IPSec

• A
  82% (23)
• B
  4% (1)
• C
  4% (1)
• D
  11% (3)

Explanation

Adding encryption to routers that already operate at minimum processing capacity would degrade their performance or make them unable to handle normal routing workloads. The solution is to offload the encryption function entirely. Inline network encryption devices are purpose-built appliances that sit in the network path and handle all encryption and decryption transparently, with no impact on the router's CPU. The routers continue doing only routing while the encryption devices handle the crypto workload. An SSL acceleration appliance (B) is specific to HTTPS/TLS web traffic, not general WAN encryption. Requiring applications to encrypt (C) is a partial measure that doesn't address all WAN traffic. Adding an encryption module to the router (D) still consumes the router's processing resources, defeating the goal of minimizing router performance impact.

No community discussion yet for this question.