ISC2 Certified in Cybersecurity (CC)Network SecurityMedium
A company is implementing a new cloud-based application. The security team needs to ensure that data transmitted between the company's on-premises network and the cloud provider's infrastructure is encrypted and authenticated. Which protocol suite is specifically designed to provide secure communication over an IP network, commonly used in this scenario for site-to-site connections?
- AFTP (File Transfer Protocol)
- BSNMP (Simple Network Management Protocol)
- CSMTP (Simple Mail Transfer Protocol)
- DIPsec (Internet Protocol Security)
Show answer & explanationAnswer & explanation
Correct answer: D. IPsec (Internet Protocol Security)
IPsec is a suite of protocols that provides cryptographic security services, including authentication and encryption, for IP communications. It's commonly used for securing VPNs, especially site-to-site connections.
Why the other options are wrong
- A. FTP is for file transfer and is inherently insecure without additional encryption.
- B. SNMP is used for network device management and monitoring, not for securing data in transit between networks.
- C. SMTP is for sending email and does not provide general network encryption and authentication.
IPsec (Internet Protocol Security)
A suite of protocols for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet in a data stream.
- Operates at the network layer (Layer 3) of the OSI model.
- Provides confidentiality, integrity, and authenticity.
- Commonly used to implement VPNs (Virtual Private Networks).
Memory trick: IPsec Secures IP, FTP Forgets Files, SMTP Sends Mail, SNMP Sees Networks.