CompTIA Security+ (SY0-601) — Question 852
The cost of removable media and the security risks of transporting data have become too great for a laboratory. The laboratory has decided to interconnect with partner laboratories to make data transfers easier and more secure. The Chief Security Officer (CSO) has several concerns about proprietary data being exposed once the interconnections are established. Which of the following security features should the network administrator implement to prevent unwanted data exposure to users in partner laboratories?
Answer options
- A. VLAN zoning with a file-transfer server in an external-facing zone
- B. DLP running on hosts to prevent file transfers between networks
- C. NAC that permits only data-transfer agents to move data between networks
- D. VPN with full tunneling and NAS authenticating through the Active Directory
Correct answer: D
Explanation
The correct answer is D because a VPN with full tunneling provides secure communication between the laboratory and partner networks, ensuring that all data transfers are encrypted and authenticated. Options A, B, and C do not offer the same level of comprehensive security for data in transit, as they either focus on network segmentation or specific data loss prevention without the secure tunnel that a VPN provides.