4.3 - Implement Secure Communication Channels According to Design CISSP Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A network administrator needs to manage a router at a remote site. The router is behind a NAT device and does not have a public IP address. The administrator's management workstation is on the corporate network. Which approach provides the most secure and reliable method for remote management?

   • AEstablish an outbound VPN connection from the router to the corporate network and manage it through the VPN tunnel.
   • BConfigure port forwarding on the NAT device to forward the SSH port to the router.
   • CUse a dynamic DNS service to assign a public hostname to the router and connect directly.
   • DUse a remote desktop tool that is installed on the router and accessible from the internet.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company uses a collaboration platform for internal meetings. The platform supports video conferencing, file sharing, and chat. The security team wants to prevent data leakage through the platform. Which configuration should be implemented?

   • ADisable the chat feature and rely on the meeting password to protect the session.
   • BEnable data loss prevention (DLP) policies that block the sharing of sensitive data and restrict file sharing to authorized users.
   • CUse a public meeting link and allow anyone with the link to join without authentication.
   • DRecord all meetings and store them in a secure repository for later review.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which security control is most effective in preventing unauthorized users from joining a collaboration meeting when the meeting link is shared publicly?

   • ADisabling participant screen sharing
   • BEnabling end-to-end encryption for the meeting
   • CUsing a high-definition video stream
   • DRequiring a meeting password and using a waiting room
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company has two data centers connected by a dedicated fiber link. The link is used for database replication and backup traffic. The security team is considering using IPsec with ESP in tunnel mode. However, the network team is concerned about the performance impact of encryption on the high-volume traffic. Which approach best balances security and performance?

   • AUse IPsec with AES-GCM and enable hardware acceleration on the routers at both ends.
   • BUse TLS termination at the application layer for database replication only.
   • CUse IPsec with 3DES and no hardware acceleration to reduce complexity.
   • DUse MPLS with traffic separation and no encryption to maximize performance.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A military organization uses a satellite link for communication with a forward operating base. The link is susceptible to jamming and interception. The organization needs to ensure the availability of the link during an attack and protect the confidentiality of the transmitted data. Which combination of controls is most effective?

   • AUse a higher frequency band and rely on the atmospheric absorption to prevent interception.
   • BIncrease the transmission power and use a simple XOR cipher for encryption.
   • CUse spread spectrum techniques and encrypt all traffic with AES-256.
   • DUse a directional antenna and rely on the physical alignment to prevent interception.
   Reveal Solution Discussion Select an answer first