100-160 Question 46
Select 4A company is transferring sensitive customer data between two branch offices over the internet. To ensure the data is secure while in transit, which of the following protocols should the company use?
- A
HTTPS
- B
FTP
- C
TLS
- D
IPSec
- E
SMTP without encryption
- F
SSH
Show answer and explanation
Correct answers: A, C, D, F
Explanation
To secure sensitive data while in transit, encryption protocols like HTTPS, TLS, IPSec, and SSH are essential as they provide robust encryption and protect data from interception and tampering. Protocols like FTP and SMTP without encryption lack built-in security mechanisms and are not suitable for transmitting sensitive information without additional safeguards.
- A. Correct.
HTTPS (Hypertext Transfer Protocol Secure) encrypts data in transit using SSL/TLS, making it suitable for secure communication over the internet.
- B. Incorrect.
FTP (File Transfer Protocol) does not encrypt data by default, making it insecure for transferring sensitive information unless paired with additional encryption methods like FTPS or SFTP.
- C. Correct.
TLS (Transport Layer Security) provides encryption for data in transit and is commonly used to secure protocols such as HTTPS, making it a critical choice for secure data transfer.
- D. Correct.
IPSec (Internet Protocol Security) encrypts data at the network layer, ensuring data in transit is protected against interception and tampering.
- E. Incorrect.
SMTP without encryption does not secure email communications, leaving data vulnerable during transmission.
- F. Correct.
SSH (Secure Shell) encrypts data in transit and is commonly used for secure remote access and file transfers, making it a valid choice for securing sensitive data transfers.