SK0-004 · Question #481
An enterprise administrator has a server that requires private communication between the application team and the administrator's team. Which of the following solutions would BEST meet this…
The correct answer is D. Configure IPSec. IPSec encrypts and authenticates IP traffic at the network layer, providing private communication between two specific teams without requiring application changes.
Question
An enterprise administrator has a server that requires private communication between the application team and the administrator's team. Which of the following solutions would BEST meet this requirement?
Options
- AImplement a NIDS
- BEnable a host-based firewall
- CInstall a RADIUS server
- DConfigure IPSec
How the community answered
(42 responses)- A7% (3)
- B17% (7)
- C5% (2)
- D71% (30)
Why each option
IPSec encrypts and authenticates IP traffic at the network layer, providing private communication between two specific teams without requiring application changes.
A NIDS monitors network traffic for anomalies and alerts on suspicious activity but does not encrypt or otherwise secure communications between teams.
A host-based firewall controls which traffic is permitted or blocked but does not provide encryption or confidentiality for the communication channel.
A RADIUS server provides centralized network access authentication and authorization but does not encrypt or privatize communications between teams.
IPSec operates at the network layer to provide confidentiality, integrity, and authentication for all IP traffic between two endpoints or subnets. It directly fulfills the requirement for private communication between the application team and the administrator team by securing the channel itself, ensuring no third party can read or tamper with the traffic in transit.
Concept tested: IPSec network-layer encryption for private communication
Source: https://learn.microsoft.com/en-us/windows-server/security/windows-firewall/windows-firewall-with-advanced-security
Topics
Community Discussion
No community discussion yet for this question.