Question 35

Ensure only TLS and other encrypted protocols are selected for use on the network, and only permit authorized traffic via secure protocols

To achieve highly secure network traffic during transit, it is essential to prioritize the use of encrypted protocols such as TLS. This approach not only protects the data being transmitted but also ensures that only authorized traffic is permitted, thereby enhancing overall security.

A) Ensure that NAC is enforced on all network segments, and confirm that firewalls have updated policies to block unauthorized traffic

While enforcing Network Access Control (NAC) and updating firewall policies are important actions for network security, they primarily focus on controlling access and preventing unauthorized devices from connecting to the network. They do not specifically address the encryption of traffic in transit, which is critical for securing data.

B) Ensure only TLS and other encrypted protocols are selected for use on the network, and only permit authorized traffic via secure protocols

This option directly addresses the need for secure transmission of data by mandating the use of encrypted protocols such as TLS. By ensuring that only authorized traffic is transmitted through secure channels, this approach effectively protects data integrity and confidentiality during transit.

C) Configure the perimeter IPS to block inbound HTTPS directory traversal traffic, and verify that signatures are updated on a daily basis

Configuring an Intrusion Prevention System (IPS) to block specific types of malicious traffic, such as HTTPS directory traversal attacks, is a reactive security measure. Although it enhances security, it does not inherently secure the data being transmitted, nor does it focus on encryption protocols.

D) Ensure that the EDR software monitors for unauthorized applications that could be used by threat actors, and configure alerts for the security team

While monitoring for unauthorized applications through Endpoint Detection and Response (EDR) software is a vital aspect of an overall security strategy, it does not directly secure network traffic during transit. This option is more focused on preventing malware and unauthorized software rather than securing data transmission.

Conclusion

The emphasis on utilizing TLS and other encrypted protocols in Option B makes it the most effective action for securing network traffic in transit. Other options, while beneficial for overall network security, do not directly address the critical need for encryption, which is essential for protecting data from interception and ensuring confidentiality. Thus, Option B stands out as the best choice for achieving the desired level of security.