An Enterprise with Global Sites Processes and Exchanges Highly Sensitive

question 377

Multiple Choice

An enterprise with global sites processes and exchanges highly sensitive information that is protected under several countries' arms trafficking laws. There is new information that malicious nation-state-sponsored activities are targeting the use of encryption between the geographically disparate sites. The organization currently employs ECDSA and ECDH with P-384, SHA-384, and AES-256-GCM on VPNs between sites. Which of the following techniques would MOST likely improve the resilience of the enterprise to attack on cryptographic implementation?

• A) Add a second-layer VPN from a different vendor between sites.
• B) Upgrade the cipher suite to use an authenticated AES mode of operation.
• C) Use a stronger elliptic curve cryptography algorithm.
• D) Implement an IDS with sensors inside (clear-text) and outside (cipher-text) of each tunnel between sites.
• E) Ensure cryptography modules are kept up to date from vendor supplying them.

---

Definitions:

Cyclical Industry

An industry highly sensitive to the economic cycle, experiencing rapid growth in booming economies and significant declines during recessions.

Automobile Industry

The automobile industry encompasses the wide range of companies and activities involved in the design, manufacturing, marketing, and selling of motor vehicles.

Tobacco Industry

Comprises companies and entities that manufacture, market, and distribute tobacco and tobacco-related products.

Federal Reserve

The central banking system of the United States, responsible for setting monetary policy, regulating banks, maintaining financial stability, and providing banking services.