Câu 69: CAS-003: CompTIA Advanced Security Practitioner (CASP) CAS-003

An enterprise with global sites processes and exchanges highly sensitive information that is protected under several countries' arms trafficking laws. There is new information that malicious nation-state-sponsored activities are targeting the use of encryption between the geographically disparate sites. The organization currently employs ECDSA and ECDH with P-384, SHA-384, and AES-256-GCM on VPNs between sites. Which of the following techniques would MOST likely improve the resilience of the enterprise to attack on cryptographic implementation?

1. A. Add a second-layer VPN from a different vendor between sites.
2. B. Upgrade the cipher suite to use an authenticated AES mode of operation.
3. C. Use a stronger elliptic curve cryptography algorithm. — đáp án hiện tại
4. D. Implement an IDS with sensors inside (clear-text) and outside (cipher-text) of each tunnel between sites.
5. E. Ensure cryptography modules are kept up to date from vendor supplying them.