Certified In Cybersecurity CC · Free Practice Question Medium
Question 62
Which of the following is the MOST effective way to implement forced encryption on an organization's network?
- A Implementing a password policy that requires strong passwords
- B Configuring all network devices to use encryption protocols
- C Enforcing regular security audits and monitoring
- D Using a hardware-based encryption solution
Reveal correct answer
Correct answer: B
Explanation
The correct answer: Configuring all network devices to use encryption protocols: To force encryption on an organization's network, the most direct and effective approach is to configure all network devices (routers, switches, servers, etc.) to use encryption protocols. This ensures that data transmitted across the network is encrypted and cannot be easily intercepted or understood by unauthorized parties. Protocols such as TLS (for web traffic), SSH (for secure shell access), and IPsec (for VPNs and certain network connections) are examples of encryption protocols that can be enforced on network devices. The incorrect answers: Hardware-based encryption solutions provide robust encryption, especially for data at rest, they don't necessarily force encryption across the entire network. They are typically applied to specific use cases, like encrypting data on a hard drive or a specific communication channel, rather than universally across all network communications. A strong password policy is essential for securing user accounts and preventing unauthorized access, it does not directly relate to encrypting data in transit across a network. Strong passwords help safeguard authentication mechanisms but don't enforce network data encryption. Security audits and monitoring are crucial for identifying vulnerabilities and ensuring compliance with security policies. However, by themselves, they don't implement forced encryption. They might reveal the absence of encryption and recommend its implementation, but configuring network devices to use encryption protocols is the direct action needed to achieve forced encryption.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
