Exam SY0-701 topic 1 question 500 discussion

Actual exam question from CompTIA's SY0-701

Question #: 500
Topic #: 1

A security administrator is addressing an issue with a legacy system that communicates data using an unencrypted protocol to transfer sensitive data to a third party. No software updates that use an encrypted protocol are available, so a compensating control is needed. Which of the following are the most appropriate for the administrator to suggest? (Choose two.)

A. Tokenization
B. Cryptographic downgrade
C. SSH tunneling
D. Segmentation
E. Patch installation
F. Data masking

Show Suggested Answer

Suggested Answer: CD 🗳️

by Exam_Prep221 at Dec. 18, 2024, 1:28 p.m.

Comments

Submit Cancel

jennyka76

2 months, 1 week ago

Selected Answer: CD

Explanation: C. SSH tunneling: SSH tunneling can securely encrypt and encapsulate unencrypted traffic sent from the legacy system. It allows the unencrypted protocol to communicate over a secure channel, ensuring sensitive data is protected in transit. This compensating control effectively mitigates the risk of sending data in cleartext. D. Segmentation: Network segmentation isolates the legacy system within a secure zone, limiting its exposure to other parts of the network. By restricting communication pathways, segmentation reduces the attack surface and protects sensitive data from unauthorized access.

upvoted 2 times

...

Aces155

3 months, 2 weeks ago

Selected Answer: AD

I think A and D. A replaces the sensitive data with non-sensitive substitutes and D encrypts communication over an insecure network

upvoted 1 times

Aces155

3 months, 2 weeks ago

Ummm I must have been confused when I wrote this because I described A and C but obviously the answer is CD, my mistake

upvoted 1 times

...

beebax

4 months ago

i don't get why CD is the answer since in the question it isn't stated that they are concerned about the impact of the breach and want to contain it they are just addressing the unencrypted protocols issue?

upvoted 2 times

Eracle

3 months, 4 weeks ago

I agree with you, in fact I think the best answers are D, for sure, and probably A.

upvoted 1 times

...

Phatcharaphon

4 months, 2 weeks ago

Selected Answer: CD

C. SSH tunneling: This encrypts the communication between systems, ensuring the sensitive data is securely transferred. D. Segmentation: This can be used to isolate the legacy system, reducing the risk of exposing sensitive data, though it doesn’t directly encrypt the communication.

upvoted 1 times

...