nerdexam
CompTIA

CAS-002 · Question #198

Due to a new regulatory requirement, ABC Company must now encrypt all WAN transmissions. When speaking with the network administrator, the security administrator learns that the existing routers…

The correct answer is A. Deploy inline network encryption devices. Inline network encryption appliances offload cryptographic processing from underpowered routers, enabling WAN encryption compliance without degrading router performance.

Technical Integration of Enterprise Components

Question

Due to a new regulatory requirement, ABC Company must now encrypt all WAN transmissions. When speaking with the network administrator, the security administrator learns that the existing routers have the minimum processing power to do the required level of encryption. Which of the following solutions minimizes the performance impact on the router?

Options

  • ADeploy inline network encryption devices
  • BInstall an SSL acceleration appliance
  • CRequire all core business applications to use encryption
  • DAdd an encryption module to the router and configure IPSec

How the community answered

(42 responses)
  • A
    83% (35)
  • B
    10% (4)
  • C
    2% (1)
  • D
    5% (2)

Why each option

Inline network encryption appliances offload cryptographic processing from underpowered routers, enabling WAN encryption compliance without degrading router performance.

ADeploy inline network encryption devicesCorrect

Inline network encryption devices are dedicated hardware appliances inserted between the router and the WAN link that handle all encryption and decryption operations independently, completely offloading cryptographic overhead from the router's CPU so routing performance is unaffected by the new encryption mandate.

BInstall an SSL acceleration appliance

SSL acceleration appliances optimize SSL/TLS processing for web application traffic only and do not address general WAN-layer network encryption requirements.

CRequire all core business applications to use encryption

Requiring applications to use encryption shifts processing burden to application servers and endpoints but does not address the WAN transmission encryption mandate or reduce load on the routers.

DAdd an encryption module to the router and configure IPSec

Adding an encryption module to the router still consumes the router's processing resources, and with the router already at minimum processing capacity, this does not adequately minimize performance impact.

Concept tested: Inline encryption appliances for WAN router performance offload

Source: https://csrc.nist.gov/publications/detail/sp/800-175b/rev-1/final

Topics

#WAN encryption#inline encryption#IPSec#network performance

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice