A health care provider is considering Internet access for their employees and patients. Which of the following is the organization's MOST secure solution for protection of data?

Question

Options

• APublic Key Infrastructure (PKI) and digital signatures
• BTrusted server certificates and passphrases
• CUser ID and password
• DAsymmetric encryption and User ID

• A
  83% (19)
• B
  9% (2)
• C
  4% (1)
• D
  4% (1)

Explanation

PKI with digital signatures provides the most comprehensive security framework by addressing all core security objectives: confidentiality (via encryption), integrity (via digital signatures that detect tampering), authentication (via certificates that verify identities), and non-repudiation (via signed transactions that cannot be denied). This is especially critical in healthcare where PHI must be protected end-to-end. The other options are weaker: trusted server certificates with passphrases and user ID/password provide only authentication without strong data protection; asymmetric encryption alone lacks the non-repudiation and identity verification that a full PKI infrastructure provides. PKI is the gold standard for securing sensitive data over public networks in regulated environments.

No community discussion yet for this question.