CompTIA CySA+ (CS0-002) — Question 376

Company A is in the process of merging with Company B. As part of the merger, connectivity between the ERP systems must be established so pertinent financial information can be shared between the two entities. Which of the following will establish a more automated approach to secure data transfers between the two entities?

Answer options

• A. Set up an FTP server that both companies can access and export the required financial data to a folder.
• B. Set up a VPN between Company A and Company B, granting access only to the ERPs within the connection.
• C. Set up a PKI between Company A and Company B and intermediate shared certificates between the two entities.
• D. Create static NATs on each entity's firewalls that map to the ERR systems and use native ERP authentication to allow access.

Correct answer: B

Explanation

The correct answer is B because establishing a VPN allows for a secure and automated connection specifically designed for the ERPs, facilitating safe data transfer. Option A lacks automation and security as FTP is not encrypted, while C, although secure, is more complex and doesn't focus on direct ERP connectivity. Option D complicates access management and does not provide the same level of security as a VPN.