Questão 93 — CompTIA SY0-701 CompTIA Security+ Certification Exam
A company is using a legacy FTP server to transfer financial data to a third party. The legacy system does not support SFTP, so a compensating control is needed to protect the sensitive, financial data in transit. Which of the following would be the most appropriate for the company to use?
- A. Telnet connection
- B. SSH tunneling
- C. Patch installation
- D. Full disk encryption
Resposta correta:
B
Explicação
Explanation: Correct answer: B. SSH tunneling When a legacy FTP server cannot be upgraded to SFTP, the most appropriate compensating control is to use a VPN or IPsec tunnel. These technologies encrypt the data in transit, protecting it from eavesdropping and interception. By wrapping the insecure FTP connection in an encrypted tunnel, the sensitive financial data is protected even though the underlying FTP protocol remains unencrypted. This is a common compensating control for legacy systems that cannot be immediately upgraded.
Quer todas as 907 questões por R$ 1,00?