A hospital uses a video conferencing system for telemedicine. The system is used by doctors on both hospital-managed devices and personal devices. The hospital's security team is concerned about the security of the personal devices. Which control provides the most effective protection for the telemedicine sessions?

Require end-to-end encryption for all sessions and enforce multi-factor authentication for all participants.

Record all sessions and store them in a secure repository for later review.

Require all doctors to use hospital-managed devices for telemedicine sessions.

Use a strong meeting password and disable screen sharing for all participants.

A university uses a collaboration platform for online classes. The platform allows students to share their screens and files. The IT department wants to prevent students from sharing inappropriate content and to ensure that only enrolled students can join the class. Which configuration should be implemented?

Record all classes and review them after the session for inappropriate content.

Restrict screen sharing and file sharing to the instructor, and require authentication for all participants.

Disable the chat feature and use a public meeting link.

Allow all participants to share their screens and files, and rely on the meeting password.

A system administrator needs to perform emergency maintenance on a server in a remote data center. The only available network path is over the public internet. The administrator has a laptop with a VPN client. Which steps should be taken to ensure a secure connection?

Use SSH to the server with password authentication and no VPN.

Establish a VPN connection to the data center, then use RDP with Network Level Authentication (NLA) to access the server.

Use RDP directly over the internet with a strong password and enable the firewall.

Use a web-based remote management tool over HTTPS without a VPN.

A network administrator needs to remotely manage core switches at a branch office. The switches support SSH, SNMPv3, and a web-based management interface. The organization's security policy mandates strong encryption and mutual authentication for all administrative access. Which approach best meets the policy?

Use the web interface over HTTPS with a shared administrative password.

Use Telnet with a one-time password generator for each session.

Use SNMPv3 with authPriv security level and a community string.

Use SSH with key-based authentication for CLI access and disable the web interface.

In a secure voice communication system, what is the role of secure signaling?

To provide redundancy for the media path

To protect the control messages that set up, manage, and tear down the call

To encrypt the audio payload so that it cannot be intercepted

To authenticate the users at the application layer

Certified Information Systems Security Professional

Domain 4Objective 3

4.3 - Implement Secure Communication Channels According to Design CISSP Practice Questions (Page 5)

Part of the Communication and Network Security domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 3–5 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

6concepts

13%of the exam

Questions 21–25

21expert · hard
A hospital uses a video conferencing system for telemedicine. The system is used by doctors on both hospital-managed devices and personal devices. The hospital's security team is concerned about the security of the personal devices. Which control provides the most effective protection for the telemedicine sessions?
Select an answer first
22application · medium
A university uses a collaboration platform for online classes. The platform allows students to share their screens and files. The IT department wants to prevent students from sharing inappropriate content and to ensure that only enrolled students can join the class. Which configuration should be implemented?
Select an answer first
23application · medium
A system administrator needs to perform emergency maintenance on a server in a remote data center. The only available network path is over the public internet. The administrator has a laptop with a VPN client. Which steps should be taken to ensure a secure connection?
Select an answer first
24application · medium
A network administrator needs to remotely manage core switches at a branch office. The switches support SSH, SNMPv3, and a web-based management interface. The organization's security policy mandates strong encryption and mutual authentication for all administrative access. Which approach best meets the policy?
Select an answer first
25foundation · easy
In a secure voice communication system, what is the role of secure signaling?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

4.3 - Implement Secure Communication Channels According to Design CISSP Practice Questions (Page 5)

Questions 21–25

A system administrator needs to perform emergency maintenance on a server in a remote data center. The only available network path is over the public internet. The administrator has a laptop with a VPN client. Which steps should be taken to ensure a secure connection?

In a secure voice communication system, what is the role of secure signaling?

Keep studying — Communication and Network Security