CompTIA SecurityX (CAS-005) — Question 223

A security manager is creating a connection between two networks that process data at different classification levels. The main goal of this connection is to pass data from the higher classification side to the lower classification side without causing spillage. Only approved fie types and content will be allowed. Which of the following technologies would best meet this objective?

Answer options

• A. Network access control
• B. File integrity monitoring
• C. Cross-domain solution
• D. Microsegmentation

Correct answer: C

Explanation

The correct answer is C, the Cross-domain solution, as it is specifically designed to facilitate secure data transfer between networks of different security classifications while preventing spillage. The other options, such as Network access control and Microsegmentation, focus on network security but do not address the need for controlled data flow across classification boundaries, while File integrity monitoring is primarily concerned with ensuring the integrity of files rather than managing cross-domain data transfers.