I like C & E. HMAC or encryption by itself do not provide playback protection. You need a timestamp in the data (see JWT). Usually encryption as in HTTPS instead of HTTP handles palyback protection as well.
HMAC does provide protection against reply attack, so according to me B is the correct answer.
Additionally, C is not fully correct as end-to-end encryption might presume symmetric as well as asymmetric (TLS) encryption. In case of symmetric one, there is no built-in protection against reply attacks as it provides confidentialty only, not authentication.
B & E are correct ones according to me.
HMAC is one of the most secure methods to authenticate API calls. It has unique properties to provide protection against MIM attacks like replay and request tampering. ASPSecurityKit provides a complete end-to-end implementation of providers for both server and JS clients to integrate HMAC in your API service. And short live tokens.
Poor question, HMAC and encryption doesn’t provide protection against reply attacks. Timestamps, random session keys, password for each transaction does. I would go with end-to-end encryption and short-lived access tokens since the e2e is used many times as the proper security mechanism in the DEVCOR Study Guide.
Agree with FR99, B and E. IMO B alone is not going to prevent replay attack, it has to be used along with E.
https://en.wikipedia.org/wiki/Replay_attack#General_countermeasure_for_all_replay_attacks
upvoted 5 times
...
This section is not available anymore. Please use the main Exam Page.350-901 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
FR99
Highly Voted 2 years, 9 months agokayleen
Highly Voted 2 years, 5 months agoB3nd3cida
2 years agomartin_k1
11 months, 1 week agoTeringzooi
Most Recent 7 months, 3 weeks agodesignated
8 months, 2 weeks agoQuiShong
11 months, 1 week agojinck
1 year, 4 months agochulenzy
1 year, 6 months agothinkingape
2 years, 5 months ago