An Enterprise with Global Sites Processes and Exchanges Highly Sensitive

question 377

Multiple Choice

An enterprise with global sites processes and exchanges highly sensitive information that is protected under several countries' arms trafficking laws. There is new information that malicious nation-state-sponsored activities are targeting the use of encryption between the geographically disparate sites. The organization currently employs ECDSA and ECDH with P-384, SHA-384, and AES-256-GCM on VPNs between sites. Which of the following techniques would MOST likely improve the resilience of the enterprise to attack on cryptographic implementation?

• A) Add a second-layer VPN from a different vendor between sites.
• B) Upgrade the cipher suite to use an authenticated AES mode of operation.
• C) Use a stronger elliptic curve cryptography algorithm.
• D) Implement an IDS with sensors inside (clear-text) and outside (cipher-text) of each tunnel between sites.
• E) Ensure cryptography modules are kept up to date from vendor supplying them.

---

Definitions:

Presidential Election

A presidential election is the process by which a country’s electorate selects the President, often through direct or indirect vote.

Lusitania

British passenger liner sunk by a German U-boat, May 7, 1915, creating a diplomatic crisis and public outrage at the loss of 128 Americans (roughly 10 percent of the total aboard); Germany agreed to pay reparations, and the United States waited two more years to enter World War I.

William Jennings Bryan

An American orator and politician from Nebraska, known for his advocacy of populism and as a three-time Democratic presidential candidate.

Fourteen Points

A statement of principles for peace used for peace negotiations in order to end World War I, proposed by American President Woodrow Wilson.