Secure File Transfer Protocols for External Organizations | CompTIA Security+ Exam SY0-601

Best Methods for Secure File Transfers

Prev Question Next Question

Question

A security administrator wishes to implement a secure a method of file transfer when communicating with outside organizations.

Which of the following protocols would BEST facilitate secure file transfers? (Choose two.)

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E. F.

AF.

The two best protocols to facilitate secure file transfers are SCP and FTPS. Here's why:

  1. SCP (Secure Copy Protocol): SCP is a secure version of the Remote Copy (RCP) protocol. It uses SSH (Secure Shell) for authentication and encryption. SCP is a secure file transfer protocol that provides both encryption and authentication to protect data as it is transferred between systems. SCP is typically used for transferring files between Unix/Linux-based systems, but it can also be used on Windows systems with the installation of appropriate software. SCP is a good choice when you need to transfer files securely over an untrusted network, such as the internet.

  2. FTPS (File Transfer Protocol Secure): FTPS is an extension of FTP that adds support for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) cryptographic protocols. FTPS provides a way to transfer files securely between systems, using encryption to protect data in transit. FTPS is a good choice when you need to transfer files securely over a trusted network, such as an internal corporate network. FTPS is typically used by businesses that need to transfer large files, such as video or audio files.

The other protocols listed in the question are not suitable for secure file transfers:

  • TFTP (Trivial File Transfer Protocol) is a simple protocol used for transferring files between network devices. TFTP does not provide any encryption or authentication, so it is not a good choice for secure file transfers.
  • SNMP (Simple Network Management Protocol) is used for network management and monitoring, not for file transfers.
  • FTP (File Transfer Protocol) is an insecure protocol that sends data in plain text, making it vulnerable to interception and tampering. FTP should not be used for secure file transfers.
  • SMTP (Simple Mail Transfer Protocol) is used for sending and receiving email, not for file transfers.