Which of the following security controls is a set of layered security services that address communications and data security problems in the emerging Internet and intranet application space?

Question

Options

• AInternet Protocol Security (IPSec)
• BCommon data security architecture (CDSA)
• CFile encryptors
• DApplication program interface (API)

• A
  3% (1)
• B
  88% (29)
• C
  3% (1)
• D
  6% (2)

Explanation

CDSA (Common Data Security Architecture) is correct because it is specifically an Intel-developed framework consisting of layered security services designed to address communications and data security challenges in Internet and intranet application environments - it provides a modular, extensible architecture for building security into applications.

IPSec (A) operates at the network layer (Layer 3) and secures IP communications through encryption and authentication, but it is a single protocol suite, not a layered architecture of services addressing the broader application space.

File encryptors (C) are a narrow, specific tool for encrypting files at rest - they are not an architecture or a set of layered services addressing communications security broadly.

API (D) is a general programming interface mechanism, not a security control or architecture - it's a foundational software concept, not a security framework.

Memory tip: Think of CDSA as a "security building code" - just as a building code layers multiple safety standards (electrical, structural, fire), CDSA layers multiple security services. The word architecture in both the question and the answer name is your key signal.

No community discussion yet for this question.