nerdexam
CompTIA

SY0-501 · Question #436

A security administrator has written a script that will automatically upload binary and text-based configuration files onto a remote server using a scheduled task. The configuration files contain…

The correct answer is B. SCP E. Certificate-based authentication. When automating secure file transfers of sensitive configuration files to a remote server, both the transport protocol and the authentication method must provide strong security guarantees.

Submitted by joshua94· Mar 4, 2026Security architecture

Question

A security administrator has written a script that will automatically upload binary and text-based configuration files onto a remote server using a scheduled task. The configuration files contain sensitive information. Which of the following should the administrator use? (Select TWO)

Options

  • ATOPT
  • BSCP
  • CFTP over a non-standard pot
  • DSRTP
  • ECertificate-based authentication
  • FSNMPv3

How the community answered

(25 responses)
  • A
    8% (2)
  • B
    76% (19)
  • C
    4% (1)
  • F
    12% (3)

Why each option

When automating secure file transfers of sensitive configuration files to a remote server, both the transport protocol and the authentication method must provide strong security guarantees.

ATOPT

TOTP (Time-based One-Time Password) is a multi-factor authentication mechanism that requires human interaction to retrieve and enter a code, making it incompatible with fully automated scheduled scripts.

BSCPCorrect

SCP (Secure Copy Protocol) uses SSH as its underlying transport, encrypting both the data in transit and the authentication credentials, making it appropriate for transferring sensitive binary and text-based files securely to a remote server.

CFTP over a non-standard pot

FTP, even on a non-standard port, transmits data and credentials in plaintext; changing the port is security through obscurity and does not provide encryption for sensitive configuration files.

DSRTP

SRTP (Secure Real-time Transport Protocol) is designed for encrypting real-time audio and video streams, not for file transfer operations.

ECertificate-based authenticationCorrect

Certificate-based authentication eliminates the need for password prompts, which is essential for automated/scripted tasks running via scheduled jobs, while also providing stronger cryptographic authentication than passwords, preventing credential interception or brute-force attacks.

FSNMPv3

SNMPv3 is a network device management and monitoring protocol, not a file transfer protocol, and cannot be used to upload configuration files to a remote server.

Concept tested: Secure automated file transfer protocol and authentication selection

Source: https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh_overview

Topics

#SCP#certificate-based authentication#secure file transfer#sensitive data protection

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice