4.3 - Implement Secure Communication Channels According to Design CISSP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of using IPsec to protect backhaul network traffic?

   • ATo filter malicious traffic based on application signatures
   • BTo route traffic through the fastest available path
   • CTo provide confidentiality, integrity, and authentication for IP packets
   • DTo compress data to reduce bandwidth usage on the backhaul link
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company needs to provide a third-party auditor with read-only access to a specific database for a compliance review. The auditor will connect from their own office network. The company wants to ensure that the auditor can only access the database and cannot access other internal resources. Which approach should be implemented?

   • AProvide the auditor with a VPN client and grant them access to the entire internal network.
   • BUse a remote desktop tool to allow the auditor to control a workstation on the internal network.
   • CCreate a site-to-site VPN for the auditor's office and use firewall rules to restrict access to the database server only.
   • DOpen the database port on the firewall to the auditor's IP address.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which protocol is specifically designed to provide secure remote command-line access to network devices and servers, replacing insecure protocols like Telnet?

   • ASNMP (Simple Network Management Protocol)
   • BSSH (Secure Shell)
   • CHTTP (Hypertext Transfer Protocol)
   • DFTP (File Transfer Protocol)
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A healthcare organization deploys a new video conferencing platform for telehealth consultations. The platform supports both web-based and dedicated-room endpoints. The compliance team requires that patient consultations be protected from unauthorized interception and that only authenticated providers can initiate sessions. Which configuration should the security team implement?

   • AEnable end-to-end encryption for all calls and require multi-factor authentication for provider accounts, with meeting locks enabled by default.
   • BDeploy the platform on a private network segment and restrict access to the corporate VPN only, with no additional call-level controls.
   • CUse TLS for signaling only and rely on the platform's built-in waiting room feature to control participant entry.
   • DRequire a complex password for each meeting and disable recording to prevent unauthorized access to session content.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary security purpose of the 'meeting lock' feature in a collaboration platform like Zoom?

   • ATo restrict the sharing of content during the meeting
   • BTo encrypt the meeting content in transit
   • CTo prevent unauthorized participants from joining after the meeting has started
   • DTo authenticate all participants before they join
   Reveal Solution Discussion Select an answer first