nerdexam
CompTIA

CV0-002 · Question #485

A cloud administrator is securing data-at-rest and data-in-transit featured on an IaaS cloud platform. The volume to be secured is mounted storage from the same region and availability zone. The data

The correct answer is B. Ensure SSHv2 remote connection protocol is enabled. D. Ensure TLSv1.2 transport protocol is enabled. E. Ensure AES encryption is enabled.. To secure data-at-rest and data-in-transit in the most secure manner, modern and robust cryptographic protocols and algorithms are required for both connection security and data encryption.

Security

Question

A cloud administrator is securing data-at-rest and data-in-transit featured on an IaaS cloud platform. The volume to be secured is mounted storage from the same region and availability zone. The data is transferred via FTP to another Linux server in a secure manner in another availability zone, with the same data-at-rest requirements. Given this scenario, which of the following security tools, services, and/or protocols would satisfy these requirements in the MOST secure manner? (Choose three.)

Options

  • AEnsure SSHv1 remote connection protocol is enabled.
  • BEnsure SSHv2 remote connection protocol is enabled.
  • CEnsure SSLv3 transport protocol is enabled.
  • DEnsure TLSv1.2 transport protocol is enabled.
  • EEnsure AES encryption is enabled.
  • FEnsure 3DES encryption is enabled.
  • GEnsure MD5 hashing is enabled.

How the community answered

(60 responses)
  • A
    3% (2)
  • B
    57% (34)
  • C
    12% (7)
  • F
    22% (13)
  • G
    7% (4)

Why each option

To secure data-at-rest and data-in-transit in the most secure manner, modern and robust cryptographic protocols and algorithms are required for both connection security and data encryption.

AEnsure SSHv1 remote connection protocol is enabled.

SSHv1 is an outdated protocol with known security vulnerabilities and should not be used in secure environments.

BEnsure SSHv2 remote connection protocol is enabled.Correct

SSHv2 is the current, secure version of the Secure Shell protocol, providing strong encryption and authentication for remote connections and secure file transfers like SFTP.

CEnsure SSLv3 transport protocol is enabled.

SSLv3 is an outdated and insecure protocol, superseded by TLS, and is vulnerable to attacks like POODLE.

DEnsure TLSv1.2 transport protocol is enabled.Correct

TLSv1.2 is a robust and widely adopted transport layer security protocol that encrypts communications over a network, ensuring data confidentiality and integrity for secure file transfers like FTPS.

EEnsure AES encryption is enabled.Correct

AES (Advanced Encryption Standard) is a strong symmetric encryption algorithm used for data-at-rest and data-in-transit, offering high levels of security against modern cryptanalytic attacks.

FEnsure 3DES encryption is enabled.

3DES is an older symmetric encryption algorithm that is less secure and less efficient than AES, with known vulnerabilities in certain configurations.

GEnsure MD5 hashing is enabled.

MD5 is a cryptographically broken hashing algorithm and is not suitable for security purposes requiring collision resistance or strong integrity checks.

Concept tested: Secure communication protocols and encryption algorithms

Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-protocols-in-windows-server

Topics

#Data-at-rest encryption#Data-in-transit encryption#SSHv2#TLSv1.2

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice