Exam SY0-701 topic 1 question 500 discussion

Actual exam question from CompTIA's SY0-701

Question #: 500
Topic #: 1

A security administrator is addressing an issue with a legacy system that communicates data using an unencrypted protocol to transfer sensitive data to a third party. No software updates that use an encrypted protocol are available, so a compensating control is needed. Which of the following are the most appropriate for the administrator to suggest? (Choose two.)

A. Tokenization
B. Cryptographic downgrade
C. SSH tunneling
D. Segmentation
E. Patch installation
F. Data masking

Show Suggested Answer

Suggested Answer: CD 🗳️

by Exam_Prep221 at Dec. 18, 2024, 1:28 p.m.

Comments

Submit Cancel

beebax

3 days, 10 hours ago

i don't get why CD is the answer since in the question it isn't stated that they are concerned about the impact of the breach and want to contain it they are just addressing the unencrypted protocols issue?

upvoted 2 times

Eracle

21 hours, 10 minutes ago

I agree with you, in fact I think the best answers are D, for sure, and probably A.

upvoted 1 times

...

Phatcharaphon

2 weeks, 3 days ago

Selected Answer: CD

C. SSH tunneling: This encrypts the communication between systems, ensuring the sensitive data is securely transferred. D. Segmentation: This can be used to isolate the legacy system, reducing the risk of exposing sensitive data, though it doesn’t directly encrypt the communication.

upvoted 1 times

...

Exam_Prep221

3 weeks, 2 days ago

Selected Answer: CD

Explanation: C. SSH tunneling: SSH tunneling can securely encrypt and encapsulate unencrypted traffic sent from the legacy system. It allows the unencrypted protocol to communicate over a secure channel, ensuring sensitive data is protected in transit. This compensating control effectively mitigates the risk of sending data in cleartext. D. Segmentation: Network segmentation isolates the legacy system within a secure zone, limiting its exposure to other parts of the network. By restricting communication pathways, segmentation reduces the attack surface and protects sensitive data from unauthorized access.

upvoted 2 times

...