SY0-501 · Question #270
A new security policy in an organization requires that all file transfers within the organization be completed using applications that provide secure transfer. Currently, the organization uses FTP…
The correct answer is A. Replace FTP with SFTP and replace HTTP with TLS. Organizations must replace insecure file transfer protocols (FTP and HTTP) with secure alternatives that encrypt data in transit. SFTP and TLS-secured HTTP (HTTPS) are the correct replacements.
Question
A new security policy in an organization requires that all file transfers within the organization be completed using applications that provide secure transfer. Currently, the organization uses FTP and HTTP to transfer files. Which of the following should the organization implement in order to be compliant with the new policy?
Options
- AReplace FTP with SFTP and replace HTTP with TLS
- BReplace FTP with FTPS and replaces HTTP with TFTP
- CReplace FTP with SFTP and replace HTTP with Telnet
- DReplace FTP with FTPS and replaces HTTP with IPSec
How the community answered
(27 responses)- A81% (22)
- B7% (2)
- D11% (3)
Why each option
Organizations must replace insecure file transfer protocols (FTP and HTTP) with secure alternatives that encrypt data in transit. SFTP and TLS-secured HTTP (HTTPS) are the correct replacements.
SFTP (SSH File Transfer Protocol) replaces FTP by tunneling file transfers over SSH, providing encryption, authentication, and integrity for file transfers. Replacing HTTP with TLS means implementing HTTPS, which encrypts web-based file transfers using Transport Layer Security, satisfying the requirement for secure transfer protocols across both use cases.
TFTP (Trivial File Transfer Protocol) is an even less secure protocol than HTTP - it provides no authentication or encryption - making this replacement non-compliant with the new security policy.
Telnet is a completely insecure remote access protocol that transmits all data in plaintext and is not a file transfer protocol, making it an entirely inappropriate and insecure replacement for HTTP.
IPSec is a network-layer security protocol suite used for securing IP communications (commonly in VPNs), not a direct replacement for HTTP as a file transfer application-layer protocol, and would not straightforwardly make HTTP-based file transfers compliant.
Concept tested: Replacing insecure protocols with secure file transfer alternatives
Source: https://learn.microsoft.com/en-us/azure/storage/common/storage-security-guide
Topics
Community Discussion
No community discussion yet for this question.