Câu 5: CAS-002: CompTIA Advanced Security Practitioner (CASP)

Company A needs to export sensitive data from its financial system to company B’s database, using company B’s API in an automated manner. Company A’s policy prohibits the use of any intermediary external systems to transfer or store its sensitive data, therefore the transfer must occur directly between company A’s financial system and company B’s destination server using the supplied API. Additionally, company A’s legacy financial software does not support encryption, while company B’s API supports encryption. Which of the following will provide end-to-end encryption for the data transfer while adhering to these requirements?

1. A. Company A must install an SSL tunneling software on the financial system. — đáp án hiện tại
2. B. Company A’s security administrator should use an HTTPS capable browser to transfer the data.
3. C. Company A should use a dedicated MPLS circuit to transfer the sensitive data to company B.
4. D. Company A and B must create a site-to-site IPSec VPN on their respective firewalls.