CV0-003 · Question #273
A hospital is deploying a web-based application in its private cloud to service multiple facilities in a region. This application is used by employees of the hospital, as well as the patients and…
The correct answer is D. SSL/TLS. A web application serving patients, families, and staff over a private cloud needs in-transit encryption for sensitive healthcare data. SSL/TLS is the standard protocol for securing HTTP-based web application traffic.
Question
A hospital is deploying a web-based application in its private cloud to service multiple facilities in a region. This application is used by employees of the hospital, as well as the patients and their families. Which of the following security configurations is MOST likely to be deployed to secure the information from the application?
Options
- AIPSec
- BPPTP
- CL2TP
- DSSL/TLS
How the community answered
(26 responses)- B4% (1)
- C8% (2)
- D88% (23)
Why each option
A web application serving patients, families, and staff over a private cloud needs in-transit encryption for sensitive healthcare data. SSL/TLS is the standard protocol for securing HTTP-based web application traffic.
IPSec operates at the network layer and is used for site-to-site or host-to-host VPN tunnels, not for securing web application sessions between browsers and servers.
PPTP is a legacy VPN tunneling protocol with known security vulnerabilities and is not appropriate for securing web application traffic.
L2TP is a VPN tunneling protocol that provides no encryption on its own and is not designed to secure individual web application sessions.
SSL/TLS secures data in transit between the client browser and the web server by establishing an encrypted HTTPS session, which is the industry-standard mechanism for protecting web application traffic and is required for HIPAA-covered healthcare environments handling patient data.
Concept tested: SSL/TLS for web application data-in-transit security
Source: https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate
Topics
Community Discussion
No community discussion yet for this question.