How can you encrypt the username, password, and data between your NPM server and the Orion database?

How can you encrypt the username, password, and data between your NPM server and the Orion database?

• A. Use Windows authentication to encrypt the user name and password and SSL to encrypt the data
• B. Use only SSL to encrypt everything
• C. Use PGP to encrypt the username and password
• D. Enable IPsec tunnel between NPM and Orion

Answer: (A)

This question is about securing both authentication and the data path between NPM and the Orion database. Using Windows authentication leverages the Windows identity of the NPM service so credentials aren’t transmitted as a username/password over the network. This protects the credentials themselves. Enabling SSL (TLS) for the SQL connection then encrypts all data in transit between NPM and the database, so queries, results, and other data can’t be read if intercepted. Together, these practices address both how you authenticate and how you protect the data while it travels. SSL alone would encrypt data in transit but doesn’t eliminate how credentials are handled, PGP is not used for live database connections, and IPsec, while protective at the network level, is more complex and not the standard single-step approach for this scenario.

This question is about securing both authentication and the data path between NPM and the Orion database. Using Windows authentication leverages the Windows identity of the NPM service so credentials aren’t transmitted as a username/password over the network. This protects the credentials themselves. Enabling SSL (TLS) for the SQL connection then encrypts all data in transit between NPM and the database, so queries, results, and other data can’t be read if intercepted. Together, these practices address both how you authenticate and how you protect the data while it travels.

SSL alone would encrypt data in transit but doesn’t eliminate how credentials are handled, PGP is not used for live database connections, and IPsec, while protective at the network level, is more complex and not the standard single-step approach for this scenario.