200-201 Question 124
Select 3A cybersecurity analyst at your organization detects unusual outbound traffic from a user workstation. Upon investigation, it is discovered that the traffic involves file sharing over a peer-to-peer (P2P) network. What could be a potential cybersecurity concern in this scenario?
- A
The P2P network might expose sensitive company data to unauthorized users.
- B
P2P traffic can bypass traditional firewall security mechanisms.
- C
The P2P application automatically encrypts all data, ensuring no data leaks.
- D
Malware or malicious files could be downloaded through the P2P network.
- E
The P2P traffic will always comply with organizational security policies.
Show answer and explanation
Correct answers: A, B, D
Explanation
Peer-to-peer (P2P) networks pose unique cybersecurity risks, including data exposure, firewall evasion, and malware distribution. Organizations must monitor and control P2P usage to prevent potential threats. While some P2P applications offer encryption or security features, these are not foolproof, and unauthorized usage can lead to policy violations and data breaches.
- A. Correct.
P2P networks often lack proper access control, which can lead to accidental exposure of sensitive files or data to unauthorized users on the network.
- B. Correct.
P2P traffic can sometimes bypass traditional firewalls due to its ability to use various ports and dynamic IP addresses, making it harder to monitor and control.
- C. Incorrect.
While some P2P applications offer encryption, not all do, and encryption does not guarantee data security if the user unintentionally shares sensitive files.
- D. Correct.
P2P networks are often used to share files, but they can also be exploited by attackers to distribute malware or malicious files.
- E. Incorrect.
P2P traffic does not inherently comply with organizational security policies and may violate them, especially if unauthorized applications are used.