ITPEC FE Morning October 2023 Question 41
ITPEC FE Morning October 2023 — Question 41 of 80
Database communication encryption — protecting data in transit from eavesdropping (tapping).
The diagram shows an attacker tapping the communication channel between the client's and server's database connection programs. The goal is to prevent leakage of commands and results transmitted over this channel.
Encryption (answer b) makes intercepted data unreadable, directly countering the tapping threat.
Why not others:
- (a) Changing the port number is security through obscurity — it does not protect the actual data in transit. An attacker sniffing the network can discover any port.
- (c) Restricting client IP addresses controls who can connect, but does not protect the content of communication once a connection is established.
- (d) Setting a password for starting/stopping the DB connection program controls administrative access to the service, not the confidentiality of data flowing through it.
Key rule: When the threat is eavesdropping on a communication channel, the countermeasure is encryption of the data in transit (e.g., TLS/SSL).
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.