Examkin

Question

Difficulty: MediumChange Management and Security Impacts

An organization's infrastructure team plans to enable HTTP/3 (QUIC) across all enterprise edge load balancers to reduce web application latency. Because HTTP/3 utilizes UDP port 443 instead of traditional TCP port 443, the team must perform a security impact analysis before presenting the proposal to the Change Advisory Board (CAB). Which of the following represents the primary security impact that must be evaluated during this change management step?

  1. Existing deep packet inspection and network intrusion prevention rules tuned for TCP port 443 traffic may fail to inspect application-layer payloads.Answer
  2. B
    Public Transport Layer Security (TLS) certificates installed on the edge load balancers will become invalid and must be regenerated.
  3. C
    Host-based endpoint detection and response (EDR) agents on client devices will immediately terminate user connections due to protocol mismatches.
  4. D
    The change will require reclassifying the perimeter load balancers from a preventive security control to a detective security control in the risk register.

Answer

Existing deep packet inspection and network intrusion prevention rules tuned for TCP port 443 traffic may fail to inspect application-layer payloads.
Conducting a security impact analysis prior to change implementation requires assessing how infrastructure changes affect existing security controls. HTTP/3 (QUIC) uses UDP port 443 rather than TCP port 443. If network firewalls, web application firewalls, or intrusion prevention systems (IPS) are configured only to inspect TCP traffic on port 443, switching transport to UDP will result in uninspected traffic and a loss of security visibility.

Step-by-Step Solution

1
Identify the technical change proposed in the scenario
Transitioning web application traffic transport from TCP port 443 (HTTP/1.1 and HTTP/2) to UDP port 443 (HTTP/3 via QUIC).
Security impact assessments require analyzing how changes alter technical data paths and network behaviors.
2
Analyze how existing security controls interact with the new protocol
Existing perimeter firewalls, IPS devices, and network monitoring tools configured specifically for TCP streams will not automatically inspect UDP streams on port 443.
Security visibility can be severely compromised if network monitoring tools are not reconfigured or updated to support QUIC inspection.
3
Select the choice that correctly identifies this security vulnerability impact
The option highlighting potential inspection failures for network security devices tuned only for TCP port 443.
Proper change control requires uncovering unexpected security blind spots before deployment.

Key Concept

Security Impact Analysis in Change Management
Estimated Time:1m 30s
Rate this question

Topics

Change Management and Security Impacts

More questions from this topic