Exam CISM topic 1 question 254 discussion

D. IPsec protocol The IPsec (Internet Protocol Security) protocol is specifically designed to protect the confidentiality, integrity, and authenticity of data transmitted over the Internet. It provides encryption and authentication mechanisms to secure the communication between two devices or networks, ensuring that the data remains confidential during transmission. Option A (Message digests) is a cryptographic technique used for data integrity, not confidentiality. Option B (Encrypting file system) is used for encrypting data at rest on a storage device, not for data transmitted over the network. Option C (Network address translation) is a technique used for translating private IP addresses to a public IP address for routing purposes but does not directly protect data confidentiality during transmission.

D. IPsec protocol The IPsec (Internet Protocol Security) protocol is specifically designed to protect the confidentiality, integrity, and authenticity of data transmitted over the Internet. It provides encryption and authentication mechanisms to secure the communication between two devices or networks, ensuring that the data remains confidential during transmission.

D. IPsec > key words "data tramsmitted", not at rest

The correct answer is D. IPsec protocol. Explanation: Among the options provided, the IPsec (Internet Protocol Security) protocol is specifically designed to protect the confidentiality of data transmitted over the Internet. IPsec provides a suite of protocols that ensure the integrity, authentication, and encryption of IP packets in a network.

Encryption is a control that addresses confidentiality, refer to Question 87 of Domain 3 of CISM Review Questions 10th Edition.

D. IPsec protocol