nerdexam
CompTIA

CV0-002 · Question #273

A hospital is deploying a web-based application in its private cloud to service multiple facilities in a region. This application is used by employees of the hospital, as well as the patients and…

The correct answer is D. SSL/TLS. To secure a web-based application handling sensitive data from various users, SSL/TLS is the most appropriate configuration for encrypting information in transit between clients and the application servers.

Security

Question

A hospital is deploying a web-based application in its private cloud to service multiple facilities in a region. This application is used by employees of the hospital, as well as the patients and their families. Which of the following security configurations is MOST likely to be deployed to secure the information from the application?

Options

  • AIPSec
  • BPPTP
  • CL2TP
  • DSSL/TLS

How the community answered

(42 responses)
  • A
    10% (4)
  • B
    2% (1)
  • C
    5% (2)
  • D
    83% (35)

Why each option

To secure a web-based application handling sensitive data from various users, SSL/TLS is the most appropriate configuration for encrypting information in transit between clients and the application servers.

AIPSec

IPSec (Internet Protocol Security) primarily secures IP communications at the network layer and is typically used for VPNs or server-to-server encryption, not as the primary protocol for securing end-user web application access.

BPPTP

PPTP (Point-to-Point Tunneling Protocol) is an outdated VPN protocol with known security vulnerabilities and is generally not recommended for securing sensitive data in modern deployments.

CL2TP

L2TP (Layer 2 Tunneling Protocol) is a VPN tunneling protocol that often relies on IPSec for encryption and security, making it less direct and comprehensive for securing web application client-server traffic compared to SSL/TLS.

DSSL/TLSCorrect

SSL/TLS (Secure Sockets Layer/Transport Layer Security) is the standard cryptographic protocol used to secure web traffic via HTTPS, providing data confidentiality, integrity, and server authentication. It is crucial for protecting sensitive user and patient information in web-based applications from eavesdropping and tampering during communication over a network.

Concept tested: Web application security - Data in transit encryption

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ssl-tls-and-hsts-in-ad-fs

Topics

#web application security#data in transit encryption#SSL/TLS#private cloud security

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice