CompTIA CASP+ Practice Test

What is a security issue identified in the company with the 37 workstations?

1. Insufficient user authentication

2. No transport security controls

3. Inadequate physical security

4. Outdated anti-virus software

The correct answer is: No transport security controls

The identification of no transport security controls signifies a critical security issue, particularly in a scenario involving multiple workstations such as the 37 mentioned. Transport security focuses on safeguarding data in transit, which is crucial for protecting sensitive information from being intercepted or compromised during transmission over networks, including the internet and internal systems. In an environment with numerous workstations, the risk of data exposure increases, especially if users interact with external networks or send sensitive information. Without proper transport security measures like encryption protocols (e.g., TLS or SSL), data can be susceptible to various attacks such as eavesdropping or man-in-the-middle attacks. These vulnerabilities can lead to unauthorized access to sensitive data, which can have severe implications for the company's overall security posture and regulatory compliance. This highlights the importance of implementing robust transport security protocols to ensure that any data exchanged, whether through email, web applications, or other means, is protected from unauthorized access and interception. In contrast, other choices might address different aspects of security but do not center on the criticality of securing data as it is transmitted.