GET http://gateway.securetransaction.com/privileged/api/v1/changeResource?

A security audit related to confidentiality controls found the following transactions occurring in the system:

GET http://gateway.securetransaction.com/privileged/api/v1/changeResource?id=123&user=277

Which of the following solutions will solve the audit finding?
A . Using a TLS-protected API endpoint
B . Implementing a software firewall
C . Deploying a HIDS on each system
D . Implementing a Layer 4 load balancer

View Answer

Answer: A

Explanation:

Reference: https://cheatsheetseries.owasp.org/cheatsheets/Transport_Layer_Protection_Cheat_Sheet .html

The audit finding is related to confidentiality, which means the data should be protected from unauthorized access. The current API endpoint is using HTTP, which is not secure and can expose the data in transit. Using a TLS-protected API endpoint would encrypt the data and prevent anyone from reading it.

Reference: CompTIA Cloud+ Certification Exam Objectives, Domain 2.0 Security, Objective 2.1 Given a scenario, apply security configurations and compliance controls to meet cloud security requirements.