What is the BEST action to prevent loss of data integrity or confidentiality in the case of an ecommerce application running on a LAN, processing electronic fund transfers (EFT) and orders?
Using virtual private network (VPN) tunnels for data transfer
Enabling data encryption within the application
Auditing the access control to the network
Logging all changes to access lists
The best way to ensure confidentiality and integrity of data is to encrypt it using virtual private
network (VPN) tunnels. This is the most common and convenient way to encrypt the data traveling
over the network. Data encryption within the application is less efficient than VPN. The other options
are good practices, but they do not directly prevent the loss of data Integrity and confidentiality
during communication through a network.