ITPEC FE Morning April 2019 Question 45
ITPEC FE Morning April 2019 — Question 45 of 80
Preventing Data Leakage via Encryption — choosing the right countermeasure against network tapping.
The diagram shows an attacker tapping the communication channel between client and server database connection programs. The question asks how to prevent leakage of commands and results transmitted over this channel.
Encryption (option b) is the correct countermeasure. By encrypting communication between the database connection programs (e.g., using TLS/SSL), even if an attacker intercepts the packets, the data remains unreadable.
Why not others:
- (a) Changing the port number is security through obscurity — the attacker can still discover the new port via scanning, and data is still transmitted in plaintext.
- (c) Restricting client IP addresses prevents unauthorized connections but does not protect against passive eavesdropping on the network channel.
- (d) Setting a password for starting/stopping the database connection program protects against unauthorized service management, not against traffic interception.
Key rule: When the threat is eavesdropping or tapping, the countermeasure is encryption of the communication channel.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.