200-301 Question 399
Select 2A network administrator is tasked with implementing security measures to protect sensitive data on a company's network. The administrator decides to use technologies that ensure data confidentiality, integrity, and availability. Which of the following technologies should they implement?
- A
Access Control Lists (ACLs)
- B
Virtual Private Network (VPN)
- C
Intrusion Detection System (IDS)
- D
Data Encryption
- E
Network Address Translation (NAT)
Show answer and explanation
Correct answers: B, D
Explanation
To ensure data confidentiality, integrity, and availability, technologies such as VPNs and data encryption are essential. VPNs encrypt data in transit, preventing unauthorized access, while encryption protects data at rest or in transit. Other technologies like ACLs, IDS, and NAT contribute to network security but do not directly address all three aspects of the CIA triad.
- A. Incorrect.
Access Control Lists (ACLs) are used to permit or deny traffic based on specific rules. While they help control access, they do not ensure confidentiality, integrity, or availability directly.
- B. Correct.
Virtual Private Networks (VPNs) provide confidentiality by encrypting data in transit, ensuring that sensitive information is protected from eavesdropping.
- C. Incorrect.
Intrusion Detection Systems (IDS) monitor network traffic for malicious activity but do not directly enforce confidentiality, integrity, or availability.
- D. Correct.
Data Encryption ensures data confidentiality by making it unreadable to unauthorized users and is a critical measure for protecting sensitive information.
- E. Incorrect.
Network Address Translation (NAT) hides internal IP addresses but does not directly ensure data confidentiality, integrity, or availability.