LFCA: Linux Foundation Certified IT AssociateDemo

By Linux Foundation · Question Mode

QuestionQ74

Security Fundamentals

A configuration file that contains API keys must be securely moved between two Linux servers in separate data centers. Which method offers the best balance of confidentiality, integrity, and adherence to security best practices?

  • A Use rsync over SSH with password-based login and allow dynamic port forwarding through the firewall.
  • B Encrypt the file with a weak password in a .zip archive and transfer it using an unencrypted FTP connection.
  • C Use scp with SSH key-based authentication and restrict access using hardened SSH configuration.
  • D Upload the file to a private S3 bucket with temporary public read permissions and share the link via email.
Explanation

SCP transfers files through SSH, providing encrypted transport and integrity protection. SSH key-based authentication avoids password-based remote login and, together with a hardened SSH configuration, supports least-privilege access and reduces unnecessary exposure of sensitive API keys.

Community Discussion

No comments yet. Be the first to start the discussion!