100-150 Question 276
Select 2A network administrator is tasked with securing access to a company's internal web application. The administrator wants to implement a solution that ensures users provide two forms of identification before gaining access. Additionally, the administrator needs to ensure that the data exchanged between users and the application remains confidential and tamper-proof. Which of the following solutions should the administrator implement?
- A
Enable Multifactor Authentication (MFA) for user logins
- B
Use a digital certificate to encrypt communication via HTTPS
- C
Implement Role-Based Access Control (RBAC) for user authorization
- D
Enable WPA3 encryption on the internal Wi-Fi network
- E
Configure a Virtual Private Network (VPN) for remote access
Show answer and explanation
Correct answers: A, B
Explanation
The administrator needs to implement both MFA for stronger authentication and HTTPS (using a digital certificate) to ensure data confidentiality and integrity. These solutions directly address the requirements for enhanced security and secure communication.
- A. Correct.
This is correct because MFA requires users to provide two or more verification factors, which enhances authentication security.
- B. Correct.
This is correct because digital certificates enable HTTPS, ensuring encrypted and tamper-proof communication for the web application.
- C. Incorrect.
While RBAC is useful for managing user permissions, it does not directly address the need for multifactor authentication or encryption.
- D. Incorrect.
WPA3 encryption secures Wi-Fi communication but is unrelated to securing access to the internal web application directly.
- E. Incorrect.
VPNs are used for secure remote access but do not address multifactor authentication or encryption for the specific web application.