GSLC · Question #163
According to the security requirements given in case study, which of the following security method should you implement to provide data security between NSILegal and NSIHR? (Click the Exhibit button…
The correct answer is A. IPSec with ESP. IPSec with ESP is required when both data confidentiality (encryption) and integrity are needed between two network segments.
Question
According to the security requirements given in case study, which of the following security method should you implement to provide data security between NSILegal and NSIHR? (Click the Exhibit button on the toolbar to see the case study.)
Options
- AIPSec with ESP
- BEFS
- CIPSec with AH
- DGroup Policies for shared folders
How the community answered
(57 responses)- A77% (44)
- B5% (3)
- C4% (2)
- D14% (8)
Why each option
IPSec with ESP is required when both data confidentiality (encryption) and integrity are needed between two network segments.
IPSec with ESP (Encapsulating Security Payload) encrypts the payload of IP packets, providing data confidentiality in addition to integrity and authentication. When the requirement is explicitly 'data security,' encryption is mandatory, making ESP the correct IPSec mode. AH does not provide encryption, so only ESP satisfies the confidentiality requirement stated in the case study.
EFS (Encrypting File System) encrypts files at rest on NTFS volumes and does not protect data in transit between network hosts.
IPSec with AH (Authentication Header) provides integrity and authentication but does not encrypt the payload, so data confidentiality is not achieved.
Group Policies for shared folders enforce access control permissions but do not encrypt data transmitted over the network.
Concept tested: IPSec ESP vs AH for network data confidentiality
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/securing-end-to-end-ipsec-connections-by-using-ikev2
Topics
Community Discussion
No community discussion yet for this question.