Examkin

Question

Difficulty: MediumCIA Triad & Core Security Concepts

A network administrator is designing a secure transport mechanism for automated database replication traffic sent between two geographically separated data centers over the public internet. The design must specifically ensure both the confidentiality of the database records and the integrity of the data while in transit. Which TWO of the following technical controls should the administrator implement to satisfy these core security objectives?

  1. IPsec Encapsulating Security Payload (ESP) operating in tunnel mode to encrypt the network payloadAnswer
  2. Hash-based Message Authentication Code (HMAC) validation on each transmitted data packetAnswer
  3. C
    SNMPv2c trap notifications configured on gateway routers to report transfer bandwidth metrics
  4. D
    WPA3-Personal pre-shared key (PSK) authentication applied to gateway router access links

Answer

The administrator should implement IPsec Encapsulating Security Payload (ESP) in tunnel mode for payload encryption (confidentiality) and Hash-based Message Authentication Codes (HMAC) for packet-level tampering detection (integrity).
IPsec Encapsulating Security Payload (ESP) encrypts packet contents to guarantee confidentiality across untrusted networks, while Hash-based Message Authentication Codes (HMAC) supply cryptographic checksums to detect data alteration during transmission, securing integrity.

Step-by-Step Solution

1
Identify the CIA triad security requirements specified in the scenario
The requirements are data confidentiality (preventing unauthorized reading) and data integrity (preventing unauthorized alteration) for data in transit.
Security controls must match the specific threat vector and required pillar of the CIA triad.
2
Evaluate candidate controls for confidentiality in transit
IPsec ESP provides symmetric encryption of packet payloads across untrusted networks like the internet.
Encryption transforms plaintext data into ciphertext, preserving confidentiality.
3
Evaluate candidate controls for integrity in transit
HMAC generates a cryptographic checksum coupled with a secret key to detect modification or corruption.
Any alteration to the payload during transit will result in a mismatched hash value at the receiving end.

Key Concept

Mapping Security Mechanisms to CIA Triad Pillars (Confidentiality & Integrity)
Rate this question

Topics

CIA Triad & Core Security Concepts

More questions from this topic