Examkin

Question

Difficulty: HardMultifunction Devices and Printer Configuration

An IT administrator is onboarding a shared multifunction device (MFD) into a corporate environment with strict data protection compliance requirements. Security policies dictate that all documents scanned directly to network storage folders must be protected against packet interception during transit across internal subnets, and that sensitive print data written to the MFD's internal storage must be rendered unreadable if the physical drive is stolen or decommissioned. Which TWO of the following configuration settings must the administrator implement on the MFD to satisfy these requirements?

  1. Enable internal storage drive encryption using AES-256 and configure automated job file sanitization policies on the embedded controller.Answer
  2. Configure network scanning target profiles to enforce SMBv3 protocol communication with transport encryption enabled.Answer
  3. C
    Assign an Automatic Private IP Addressing (APIPA) address to the MFD interface to guarantee secure, routable delivery across separate network subnets.
  4. D
    Configure the MFD DNS server setting to handle dynamic IP address assignment and subnet mask allocation for scanning clients.
  5. E
    Set the outbound Scan-to-Email transport service to port 80 to establish an encrypted TLS payload tunnel to the corporate mail gateway.

Answer

The administrator must enable internal storage drive encryption with automated sanitization and configure network scanning destination profiles to enforce SMBv3 with transport encryption.
To secure data at rest on an MFD internal drive, administrators must enable full-disk encryption and automated sanitization policies. To secure data in transit when scanning to network file shares, administrators must enforce SMBv3 protocol settings with message/transport encryption enabled.

Step-by-Step Solution

1
Identify the data-at-rest security requirement for internal MFD storage.
Local drive encryption (such as AES-256) combined with job file sanitization/purging satisfies protection against physical drive theft and unauthorized recovery.
MFD hard drives store spooled print jobs and temporary scan files that remain accessible unless encrypted or explicitly overwritten.
2
Identify the data-in-transit security requirement for network share scanning.
Enforcing SMBv3 with transport encryption ensures files sent over SMB to network folders are encrypted end-to-end.
Legacy SMB versions transmit data unencrypted, exposing document content to network sniffing during traversal of internal subnets.

Key Concept

MFD Storage Security and Encrypted Network File Transfer Configuration
Estimated Time:2m 0s
Rate this question

Topics

Multifunction Devices and Printer Configuration

More questions from this topic