Exam 200-201 topic 1 question 233 discussion

Actual exam question from Cisco's 200-201

Question #: 233
Topic #: 1

An organization is cooperating with several third-party companies. Data exchange is on an unsecured channel using port 80. Internal employees use the FTP service to upload and download sensitive data. An engineer must ensure confidentiality while preserving the integrity of the communication. Which technology must the engineer implement in this scenario?

A. RADIUS server
B. web application firewall
C. X.509 certificates
D. CA server

Show Suggested Answer

Suggested Answer: C 🗳️

by cy_analyst at Oct. 18, 2022, 8:44 a.m.

Comments

Submit Cancel

SecurityGuy

9 months, 3 weeks ago

Selected Answer: C

X.509 certificates It is a digital certificate that uses the widely accepted international X.509 public key infrastructure (PKI) standard to verify that a public key belongs to the user, computer or service identity contained within the certificate. https://www.techtarget.com/searchsecurity/definition/X509-certificate

upvoted 3 times

...

drdecker100

1 year, 3 months ago

Selected Answer: C

o ensure confidentiality while preserving the integrity of communication, the engineer must implement encryption technology. In this scenario, the best option would be to implement Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocols to encrypt data exchange between the organization and third-party companies. Additionally, the engineer should consider replacing FTP service with a more secure alternative, such as SFTP or FTPS. Out of the options given, the technology that could potentially help with encryption is X.509 certificates, as they are used for secure communication and authentication through SSL/TLS. However, X.509 certificates alone cannot provide encryption, so it may not be the best option in this scenario.

upvoted 1 times

...

cy_analyst

1 year, 7 months ago

Selected Answer: C

X.509 provides security services as authentication and integrity.

upvoted 1 times

...