CAS-002 · Question #198
Due to a new regulatory requirement, ABC Company must now encrypt all WAN transmissions. When speaking with the network administrator, the security administrator learns that the existing routers…
The correct answer is A. Deploy inline network encryption devices. Inline network encryption appliances offload cryptographic processing from underpowered routers, enabling WAN encryption compliance without degrading router performance.
Question
Due to a new regulatory requirement, ABC Company must now encrypt all WAN transmissions. When speaking with the network administrator, the security administrator learns that the existing routers have the minimum processing power to do the required level of encryption. Which of the following solutions minimizes the performance impact on the router?
Options
- ADeploy inline network encryption devices
- BInstall an SSL acceleration appliance
- CRequire all core business applications to use encryption
- DAdd an encryption module to the router and configure IPSec
How the community answered
(42 responses)- A83% (35)
- B10% (4)
- C2% (1)
- D5% (2)
Why each option
Inline network encryption appliances offload cryptographic processing from underpowered routers, enabling WAN encryption compliance without degrading router performance.
Inline network encryption devices are dedicated hardware appliances inserted between the router and the WAN link that handle all encryption and decryption operations independently, completely offloading cryptographic overhead from the router's CPU so routing performance is unaffected by the new encryption mandate.
SSL acceleration appliances optimize SSL/TLS processing for web application traffic only and do not address general WAN-layer network encryption requirements.
Requiring applications to use encryption shifts processing burden to application servers and endpoints but does not address the WAN transmission encryption mandate or reduce load on the routers.
Adding an encryption module to the router still consumes the router's processing resources, and with the router already at minimum processing capacity, this does not adequately minimize performance impact.
Concept tested: Inline encryption appliances for WAN router performance offload
Source: https://csrc.nist.gov/publications/detail/sp/800-175b/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.