4.3 - Implement Secure Communication Channels According to Design CISSP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A law firm uses a collaboration platform for client meetings. The platform supports file sharing, screen sharing, and video conferencing. The firm's policy requires that client data shared during meetings be protected from unauthorized access and that only invited participants can join. Which configuration should be applied?

   • AEnable meeting locks, require authentication for all participants, and restrict file sharing to the host.
   • BDisable screen sharing and rely on the meeting password to protect the session.
   • CRecord all meetings and store them in a shared drive accessible to all firm employees.
   • DUse a public meeting link and allow anyone with the link to join without authentication.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Why is authentication critical in satellite communications?

   • ATo ensure that only authorized ground stations can use the satellite link
   • BTo improve the signal-to-noise ratio of the link
   • CTo reduce the latency of the satellite link
   • DTo encrypt the data to prevent eavesdropping
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company has a business partner that needs to access a specific application hosted in the company's data center. The partner's users will access the application over the internet. The company wants to ensure that the connection is secure and that only authorized partner users can access the application. Which approach should be implemented?

   • AUse a dedicated leased line to the partner's office and assume it is secure.
   • BImplement a client-based VPN for partner users and restrict access to the application using firewall rules.
   • CPublish the application on the internet and rely on the application's built-in authentication.
   • DUse a remote desktop gateway that allows partner users to access a desktop on the internal network.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A multinational company has a remote administrator who needs to manage servers in two different data centers. The administrator's laptop is not managed by the company and may contain malware. The company's security policy requires strong authentication and encryption for all administrative access. Which approach provides the most secure and practical solution?

   • AUse a jump server that is accessible from the internet with RDP and NLA.
   • BAllow the administrator to use their personal laptop with a VPN client and a strong password.
   • CUse a remote desktop gateway that requires smart card authentication for all connections.
   • DProvide the administrator with a company-managed laptop that has a hardened image and a VPN client, and require MFA for VPN access.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A financial services firm connects its headquarters to a colocation data center using a dedicated fiber link. The link carries transaction data between the two sites. The security team must ensure that the data is protected from interception on the link and that any tampering is detected. Which control should be implemented?

   • AUse a dedicated dark fiber with no additional encryption because the link is physically isolated.
   • BDeploy an IPsec VPN tunnel between the two sites with ESP in transport mode using AES-GCM.
   • CUse MPLS with traffic separation and rely on the provider's physical security.
   • DImplement a TLS proxy at each end and terminate TLS at the application layer.
   Reveal Solution Discussion Select an answer first