CV0-002 · Question #485
A cloud administrator is securing data-at-rest and data-in-transit featured on an IaaS cloud platform. The volume to be secured is mounted storage from the same region and availability zone. The data
The correct answer is B. Ensure SSHv2 remote connection protocol is enabled. D. Ensure TLSv1.2 transport protocol is enabled. E. Ensure AES encryption is enabled.. To secure data-at-rest and data-in-transit in the most secure manner, modern and robust cryptographic protocols and algorithms are required for both connection security and data encryption.
Question
A cloud administrator is securing data-at-rest and data-in-transit featured on an IaaS cloud platform. The volume to be secured is mounted storage from the same region and availability zone. The data is transferred via FTP to another Linux server in a secure manner in another availability zone, with the same data-at-rest requirements. Given this scenario, which of the following security tools, services, and/or protocols would satisfy these requirements in the MOST secure manner? (Choose three.)
Options
- AEnsure SSHv1 remote connection protocol is enabled.
- BEnsure SSHv2 remote connection protocol is enabled.
- CEnsure SSLv3 transport protocol is enabled.
- DEnsure TLSv1.2 transport protocol is enabled.
- EEnsure AES encryption is enabled.
- FEnsure 3DES encryption is enabled.
- GEnsure MD5 hashing is enabled.
How the community answered
(60 responses)- A3% (2)
- B57% (34)
- C12% (7)
- F22% (13)
- G7% (4)
Why each option
To secure data-at-rest and data-in-transit in the most secure manner, modern and robust cryptographic protocols and algorithms are required for both connection security and data encryption.
SSHv1 is an outdated protocol with known security vulnerabilities and should not be used in secure environments.
SSHv2 is the current, secure version of the Secure Shell protocol, providing strong encryption and authentication for remote connections and secure file transfers like SFTP.
SSLv3 is an outdated and insecure protocol, superseded by TLS, and is vulnerable to attacks like POODLE.
TLSv1.2 is a robust and widely adopted transport layer security protocol that encrypts communications over a network, ensuring data confidentiality and integrity for secure file transfers like FTPS.
AES (Advanced Encryption Standard) is a strong symmetric encryption algorithm used for data-at-rest and data-in-transit, offering high levels of security against modern cryptanalytic attacks.
3DES is an older symmetric encryption algorithm that is less secure and less efficient than AES, with known vulnerabilities in certain configurations.
MD5 is a cryptographically broken hashing algorithm and is not suitable for security purposes requiring collision resistance or strong integrity checks.
Concept tested: Secure communication protocols and encryption algorithms
Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-protocols-in-windows-server
Topics
Community Discussion
No community discussion yet for this question.