SY0-501 · Question #436
A security administrator has written a script that will automatically upload binary and text-based configuration files onto a remote server using a scheduled task. The configuration files contain…
The correct answer is B. SCP E. Certificate-based authentication. When automating secure file transfers of sensitive configuration files to a remote server, both the transport protocol and the authentication method must provide strong security guarantees.
Question
A security administrator has written a script that will automatically upload binary and text-based configuration files onto a remote server using a scheduled task. The configuration files contain sensitive information. Which of the following should the administrator use? (Select TWO)
Options
- ATOPT
- BSCP
- CFTP over a non-standard pot
- DSRTP
- ECertificate-based authentication
- FSNMPv3
How the community answered
(25 responses)- A8% (2)
- B76% (19)
- C4% (1)
- F12% (3)
Why each option
When automating secure file transfers of sensitive configuration files to a remote server, both the transport protocol and the authentication method must provide strong security guarantees.
TOTP (Time-based One-Time Password) is a multi-factor authentication mechanism that requires human interaction to retrieve and enter a code, making it incompatible with fully automated scheduled scripts.
SCP (Secure Copy Protocol) uses SSH as its underlying transport, encrypting both the data in transit and the authentication credentials, making it appropriate for transferring sensitive binary and text-based files securely to a remote server.
FTP, even on a non-standard port, transmits data and credentials in plaintext; changing the port is security through obscurity and does not provide encryption for sensitive configuration files.
SRTP (Secure Real-time Transport Protocol) is designed for encrypting real-time audio and video streams, not for file transfer operations.
Certificate-based authentication eliminates the need for password prompts, which is essential for automated/scripted tasks running via scheduled jobs, while also providing stronger cryptographic authentication than passwords, preventing credential interception or brute-force attacks.
SNMPv3 is a network device management and monitoring protocol, not a file transfer protocol, and cannot be used to upload configuration files to a remote server.
Concept tested: Secure automated file transfer protocol and authentication selection
Source: https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh_overview
Topics
Community Discussion
No community discussion yet for this question.