CV0-002 · Question #273
A hospital is deploying a web-based application in its private cloud to service multiple facilities in a region. This application is used by employees of the hospital, as well as the patients and…
The correct answer is D. SSL/TLS. To secure a web-based application handling sensitive data from various users, SSL/TLS is the most appropriate configuration for encrypting information in transit between clients and the application servers.
Question
A hospital is deploying a web-based application in its private cloud to service multiple facilities in a region. This application is used by employees of the hospital, as well as the patients and their families. Which of the following security configurations is MOST likely to be deployed to secure the information from the application?
Options
- AIPSec
- BPPTP
- CL2TP
- DSSL/TLS
How the community answered
(42 responses)- A10% (4)
- B2% (1)
- C5% (2)
- D83% (35)
Why each option
To secure a web-based application handling sensitive data from various users, SSL/TLS is the most appropriate configuration for encrypting information in transit between clients and the application servers.
IPSec (Internet Protocol Security) primarily secures IP communications at the network layer and is typically used for VPNs or server-to-server encryption, not as the primary protocol for securing end-user web application access.
PPTP (Point-to-Point Tunneling Protocol) is an outdated VPN protocol with known security vulnerabilities and is generally not recommended for securing sensitive data in modern deployments.
L2TP (Layer 2 Tunneling Protocol) is a VPN tunneling protocol that often relies on IPSec for encryption and security, making it less direct and comprehensive for securing web application client-server traffic compared to SSL/TLS.
SSL/TLS (Secure Sockets Layer/Transport Layer Security) is the standard cryptographic protocol used to secure web traffic via HTTPS, providing data confidentiality, integrity, and server authentication. It is crucial for protecting sensitive user and patient information in web-based applications from eavesdropping and tampering during communication over a network.
Concept tested: Web application security - Data in transit encryption
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ssl-tls-and-hsts-in-ad-fs
Topics
Community Discussion
No community discussion yet for this question.