3.2 Architect Infrastructure and System Security ISSAP Practice Questions (Page 9)

Questions 41–42

1. 41application · medium

   A company needs to establish a secure file transfer mechanism with an external business partner. The partner's IT team insists on using SFTP, but the company's security policy requires that all data in transit be encrypted and that the connection be authenticated using digital certificates rather than passwords. Which configuration should the security architect recommend?

   • AImplement a site-to-site VPN and use plain FTP over the VPN tunnel.
   • BUse HTTPS with mutual TLS (mTLS) for the file transfer.
   • CConfigure the SFTP server to use SSH key-based authentication and disable password authentication.
   • DUse FTPS (FTP over SSL/TLS) with client certificates instead of SFTP.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   What is the primary purpose of a network intrusion detection system (NIDS)?

   • ATo manage user authentication on the network
   • BTo monitor network traffic for suspicious activity and generate alerts
   • CTo block all malicious traffic in real time
   • DTo encrypt network traffic between hosts
   Reveal Solution Discussion Select an answer first