If SSL is being used to encrypt messages that are transmitted over the network, what is a major concern of the security professional?
A.
The network segments that have systems that use different versions of SSL.
B.
If the user encrypted the message with an application layer product, it will be incompatible with SSL.
C.
Network tapping and wiretapping.
D.
The network segments that the message will travel on that the company does not control.
Explanation:
This is not a great question, but could be something you run into on
the exam. Lets look at the answers. Different SSL versions are usually not a
concern because the two communicating systems will negotiate and agree upon the
necessary version. There is no security violation issue here. SSL works at the
transport layer, thus will not be affected by what the user does. SSL protects
against network tapping and wiretapping. The remaining answer talks about the
network segments the company does not own. This is the best answer out of the four,
but a company would use SSL to protect data that is traversing through others
equipment. If the data is very sensitive and has to travel outside of the companys
network, and SSL does not provide the necessary level of protection, a VPN
connection may be set up.
A formidable share, I just given this onto a colleague who was doing a little analysis on this. And he the truth is purchased me breakfast as a result of I found it for him.. smile. So let me reword that: Thnx for the treat! However yeah Thnkx for spending the time to discuss this, I feel strongly about it and love reading more on this topic. If doable, as you become experience, would you thoughts updating your blog with more details? It is extremely helpful for me. Big thumb up for this blog post!
http://www.bastcilkdoptb.com/
0
0