A manufacturing company needs to allow a third-party vendor to remotely access a specific production server for scheduled maintenance. The vendor should only be able to access that server, and the connection must be encrypted. The company uses a firewall at the network perimeter. Which approach should be implemented?

Provide the vendor with a direct dial-up modem connection to the server.

Configure a site-to-site VPN with the vendor and restrict the vendor's access to the specific server using firewall rules.

Open the RDP port on the firewall to the vendor's IP address and use a strong password.

Use a remote desktop gateway with no additional authentication beyond the vendor's username and password.

What is the primary advantage of using a dedicated line (e.g., MPLS or leased line) for third-party connectivity over a public internet VPN?

It eliminates the need for authentication between the parties

It automatically encrypts all data without additional configuration

It provides a private, isolated path that is not shared with general internet traffic

It is always cheaper than a VPN over the internet

A government agency uses a video conferencing system for classified briefings. The system must ensure that the content of the meetings is not accessible to unauthorized parties and that the identity of all participants is verified. Which control is most critical?

Using a dedicated room with physical access controls.

Recording the meeting and storing it in a secure repository.

A strong meeting password that is shared with all participants.

End-to-end encryption of the media stream with per-session keys.

What is the primary purpose of implementing end-to-end encryption (E2EE) in a voice or video conferencing system?

To authenticate the conferencing server to all participants

To prevent denial-of-service attacks on the conferencing infrastructure

To ensure that only the communicating endpoints can decrypt the media stream

To reduce bandwidth usage by compressing the media stream

What is the primary purpose of anti-jamming techniques in satellite communications?

To authenticate the satellite to the ground station

To ensure the availability of the satellite link by mitigating intentional interference

To increase the bandwidth of the satellite link

To encrypt the data transmitted over the satellite link

Certified Information Systems Security Professional

Domain 4Objective 3

4.3 - Implement Secure Communication Channels According to Design CISSP Practice Questions (Page 1)

Part of the Communication and Network Security domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 3–5 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

6concepts

13%of the exam

Questions 1–5

1application · medium
A manufacturing company needs to allow a third-party vendor to remotely access a specific production server for scheduled maintenance. The vendor should only be able to access that server, and the connection must be encrypted. The company uses a firewall at the network perimeter. Which approach should be implemented?
Select an answer first
2foundation · easy
What is the primary advantage of using a dedicated line (e.g., MPLS or leased line) for third-party connectivity over a public internet VPN?
Select an answer first
3application · medium
A government agency uses a video conferencing system for classified briefings. The system must ensure that the content of the meetings is not accessible to unauthorized parties and that the identity of all participants is verified. Which control is most critical?
Select an answer first
4foundation · easy
What is the primary purpose of implementing end-to-end encryption (E2EE) in a voice or video conferencing system?
Select an answer first
5foundation · easy
What is the primary purpose of anti-jamming techniques in satellite communications?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.