200-201 Question 125
Select 3A security analyst observes unusual network activity on a corporate network. Upon investigation, they identify that multiple endpoints are connecting directly to each other to share files, bypassing the corporate file-sharing server. Which of the following cybersecurity risks are most likely associated with this type of Peer-to-Peer (P2P) file sharing?
- A
Data leakage due to lack of centralized control
- B
Increased risk of malware distribution
- C
Improved network performance due to direct connections
- D
Lack of user authentication on shared files
- E
Enhanced encryption ensuring secure file transfers
Show answer and explanation
Correct answers: A, B, D
Explanation
P2P file sharing introduces significant cybersecurity risks, such as data leakage, malware distribution, and weak user authentication. These vulnerabilities arise because P2P systems lack centralized control and security enforcement, making them a frequent target for cyberattacks. Understanding these risks is critical for implementing appropriate network security measures.
- A. Correct.
P2P file sharing bypasses centralized control, making it harder to enforce data protection policies, increasing the likelihood of data leakage.
- B. Correct.
P2P networks are common vectors for spreading malware because files are shared directly without proper inspection or antivirus scanning.
- C. Incorrect.
Direct connections in P2P networks can sometimes reduce latency, but this does not necessarily improve security or mitigate risks.
- D. Correct.
P2P networks often do not enforce strong authentication mechanisms for shared files, increasing the risk of unauthorized access.
- E. Incorrect.
While some P2P systems may use encryption, it is not always guaranteed or sufficient to ensure secure file transfers, especially if the implementation is weak.