CISA · Question #65
Data from a system of sensors located outside of a network is received by the open ports on a server. Which of the following is the BEST way to ensure the integrity of the data being collected from…
The correct answer is D. Hash the data that is transmitted from the sensor system. To best ensure the integrity of data collected from an external sensor system and sent to a server, the data should be hashed at the sensor system before transmission.
Question
Data from a system of sensors located outside of a network is received by the open ports on a server. Which of the following is the BEST way to ensure the integrity of the data being collected from the sensor system?
Options
- AImplement network address translation on the sensor system
- BRoute the traffic from the sensor system through a proxy server.
- CTransmit the sensor data via a virtual private network (VPN) to the server
- DHash the data that is transmitted from the sensor system
How the community answered
(38 responses)- A5% (2)
- B13% (5)
- C8% (3)
- D74% (28)
Why each option
To best ensure the integrity of data collected from an external sensor system and sent to a server, the data should be hashed at the sensor system before transmission.
Network Address Translation (NAT) maps IP addresses and ports, primarily for network segmentation and address conservation, but it does not inherently protect the integrity of the data content during transmission.
Hashing the data at the source generates a unique fixed-size value that serves as a digital fingerprint for the transmitted data. The receiving server can then re-hash the data and compare it to the transmitted hash, immediately detecting any unauthorized alteration or corruption during transit, thereby effectively ensuring data integrity.
Concept tested: Data integrity mechanisms (hashing)
Source: https://learn.microsoft.com/en-us/windows/win32/security/cryptographic-hash-functions
Topics
Community Discussion
No community discussion yet for this question.