ITPEC FE Subject B October 2024 Question 20
ITPEC FE Subject B October 2024 — Question 20 of 20
Security Scenarios — matching security requirements to appropriate controls (PKI, WAF).
Two requirements drive the answer:
1. Digital signatures for documents → need PKI environment
- Purchase orders and invoices must be digitally signed for integrity and authenticity
- Digital signatures require certificates and key pairs, which PKI provides
- SPF is an email anti-spoofing DNS record — irrelevant to document signing
2. Prevent malicious inputs → need Web Application Firewall (WAF)
- WAF sits in front of the web server and filters malicious HTTP requests (SQL injection, XSS, etc.)
- Honeypot is a decoy system to attract attackers — it doesn't block malicious input
- VPN gateway encrypts network traffic between sites — it doesn't inspect application-layer input
Answer: (c) — A: PKI environment, B: web application firewall.
Why not others:
- (a) PKI is correct, but honeypot is a trap, not an input filter
- (b) PKI is correct, but VPN gateway secures network tunnels, not application input
- (d) SPF is for email spoofing prevention, not document signing; honeypot doesn't filter input
- (e) SPF is wrong for signing; VPN gateway doesn't filter input
- (f) SPF is wrong for signing; WAF is correct for B but A is wrong
Key rule: digital signatures → PKI; filtering malicious web input → WAF.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.