CompTIA CASP+ (CAS-003) — Question 208

The Chief Executive Officers (CEOs) from two different companies are discussing the highly sensitive prospect of merging their respective companies together.
Both have invited their Chief Information Officers (CIOs) to discern how they can securely and digitally communicate, and the following criteria are collectively determined:
✑ Must be encrypted on the email servers and clients
✑ Must be OK to transmit over unsecure Internet connections
Which of the following communication methods would be BEST to recommend?

Answer options

• A. Force TLS between domains.
• B. Enable STARTTLS on both domains.
• C. Use PGP-encrypted emails.
• D. Switch both domains to utilize DNSSEC.

Correct answer: D

Explanation

The correct answer is D, as DNSSEC helps secure communication by protecting against certain types of attacks like DNS spoofing, ensuring that the emails are sent to the correct servers. Options A and B focus on encryption during the transmission but do not meet the requirement of being encrypted on email servers and clients. Option C, while secure, does not address the necessity for encryption on the email servers and clients in the specified context.