Exam CCSP topic 1 question 324 discussion

Actual exam question from ISC's CCSP

Question #: 324
Topic #: 1

For optimal security, trust zones are used for network segmentation and isolation. They allow for the separation of various systems and tiers, each with its own security level.
Which of the following is typically used to allow administrative personnel access to trust zones?

A. IPSec
B. SSH
C. VPN
D. TLS

Show Suggested Answer

Suggested Answer: C 🗳️
Virtual private networks (VPNs) are used to provide administrative personnel with secure communication channels through security systems and into trust zones.
They allow staff who perform system administration tasks to have access to ports and systems that are not allowed from the public Internet. IPSec is an encryption protocol for point-to-point communications at the network level, and may be used within a trust zone but not to give access into a trust zone. TLS enables encryption of communications between systems and services and would likely be used to secure the VPN communications, but it does not represent the overall concept being asked for in the question. SSH allows for secure shell access to systems, but not for general access into trust zones.

by deegadaze1 at Nov. 25, 2021, 8:27 p.m.

Comments

Submit Cancel

deegadaze1

11 months ago

Why, not SSH...?

upvoted 2 times

dnd1000

4 months, 3 weeks ago

SSH would give you access to specific resources, like linux VMs, but not to entire zones.

upvoted 3 times

...

Exam CCSP All Questions

View all questions & answers for the CCSP exam

Exam CCSP topic 1 question 324 discussion

Comments

deegadaze1

dnd1000

SY0-701