Exam 312-50v13 topic 1 question 190 discussion

Actual exam question from ECCouncil's 312-50v13

Question #: 190
Topic #: 1

You are the chief cybersecurity officer at CloudSecure Inc., and your team is responsible for securing a cloud based application that handles sensitive customer data. To ensure that the data is protected from breaches, you have decided to implement encryption for both data-at-rest and data-in-transit. The development team suggests using SSL/TLS for securing data in transit. However, you want to also implement a mechanism to detect if the data was tampered with during transmission. Which of the following should you propose?

A. Implement IPsec in addition to SSL/TLS.
B. Switch to using SSH for data transmission.
C. Encrypt data using the AES algorithm before transmission.
D. Use the cloud service provider's built-in encryption services.

Show Suggested Answer

Suggested Answer: A 🗳️

by pindinga1 at Feb. 5, 2025, 2:14 a.m.

Comments

Submit Cancel

marcel9999

4 months ago

Selected Answer: A

Integrity Checks: IPsec relies on cryptographic algorithms like HMAC-SHA or HMAC-MD5 to validate the integrity of packets. If the contents are tampered with, the hash won't match, and the packet will be discarded.

upvoted 3 times

...

Dogeo

4 months, 3 weeks ago

Selected Answer: A

is the better choice for tamper detection during transmission because it ensures integrity and authenticity while SSL/TLS handles encryption.

upvoted 3 times

...

pindinga1

5 months ago

Selected Answer: C

The question is about detecting whether data has been modified during transmission, not about preventing it from being altered. In that case, the correct answer would be C

upvoted 1 times

...