In order to ensure the privacy and integrity of the data, connections between firewalls over public networks
should use:
A.
Screened subnets
B.
Digital certificates
C.
An encrypted Virtual Private Network
D.
Encryption
Explanation:
A virtual private network (VPN) is a secure, private connection through an untrusted Network. It is a private
connection because the encryption and tunneling protocols are used to ensure the confidentiality and integrity
of the data in transit.
Incorrect Answers:
A: The main purpose of a screened subnet it to set up a demilitarized zone, not to protect connections over an
insecure network.
B: A digital certificate provides identifying information. It is not used to protect connections over an insecure
network.
D: Encryption can be used to protect connections over an insecure network, but it cannot protect the integrity.References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 701