CAS-002 · Question #214
Company A needs to export sensitive data from its financial system to company B's database, using company B's API in an automated manner. Company A's policy prohibits the use of any intermediary…
The correct answer is A. Company A must install an SSL tunneling service on the financial system. Since Company A's financial software cannot natively support encryption, installing an SSL tunneling service (e.g., stunnel) directly on the financial system intercepts the unencrypted output and wraps it in SSL/TLS before transmission. This creates an encrypted tunnel from the…
Question
Company A needs to export sensitive data from its financial system to company B's database, using company B's API in an automated manner. Company A's policy prohibits the use of any intermediary external systems to transfer or store its sensitive data, therefore the transfer must occur directly between company A's financial system and company B's destination server using the supplied API. Additionally, company A's legacy financial software does not support encryption, while company B's API supports encryption. Which of the following will provide end-to-end encryption for the data transfer while adhering to these requirements?
Options
- ACompany A must install an SSL tunneling service on the financial system.
- BCompany A's security administrator should use an HTTPS capable browser to transfer the
- CCompany A should use a dedicated MPLS circuit to transfer the sensitive data to company B.
- DCompany A and B must create a site-to-site IPSec VPN on their respective firewalls.
How the community answered
(36 responses)- A75% (27)
- B8% (3)
- C3% (1)
- D14% (5)
Explanation
Since Company A's financial software cannot natively support encryption, installing an SSL tunneling service (e.g., stunnel) directly on the financial system intercepts the unencrypted output and wraps it in SSL/TLS before transmission. This creates an encrypted tunnel from the financial system directly to Company B's API endpoint, satisfying both the end-to-end encryption requirement and the prohibition on intermediary external systems. Option B (HTTPS browser) is not automated and requires human interaction. Option C (MPLS) provides network isolation but not encryption-data traversing MPLS is not encrypted by default. Option D (site-to-site IPSec VPN on firewalls) encrypts traffic between the two networks' firewalls but does not protect traffic between Company A's financial system and the firewall, nor does it terminate at Company B's API server directly.
Topics
Community Discussion
No community discussion yet for this question.