CISSP-ISSMP: Information Systems Security Management Professional

Question

You are a Web Administrator for Perfect World Inc. The company plans to host an E-commerce website, and you must design its security plan. Client computers running different operating systems will access the Web server. How should you configure the Web server so it is secure and accessible only to authenticated users? Each correct answer represents part of the solution.

Choose two

Explanation

Digest-style encrypted authentication prevents usernames and passwords from being sent across the network in plaintext, and it is suited to Internet-facing access. SSL protects the remaining HTTP communication in transit. Basic authentication alone sends credentials in an unencrypted, Base64-encoded form, while EAP is an access-authentication framework rather than the appropriate web-server authentication method. Microsoft’s IIS documentation states that Digest authentication protects credentials and that SSL should be used to secure the communication body.

Learn more

CISSP-ISSMP: Information Systems Security Management Professional

AstroTutor

Notes

Readiness

QuestionQ4

Community Discussion