Which of the following security controls is a set of layered security services that address communications and data security problems in the emerging…

The Common Data Security Architecture (CDSA) is an open, layered security framework designed by The Open Group. It provides a standard set of security services and Application Programming Interfaces (APIs) for applications. This architecture allows applications to access various security functions, such as cryptographic services, certificate management, and trust policy management, in a modular and platform-independent manner. Its layered design directly addresses the need for a comprehensive set of services for data and communications security in networked application environments, precisely matching the question's description of a "set of layered security services."

A. Internet Protocol Security (IPSec): IPSec is a network-layer protocol suite for securing IP communications, not a comprehensive, layered application-level security architecture.

C. File encryptors: This refers to a specific tool for encrypting data at rest, not a layered architecture of services for both communications and data.

D. Application program interface (API): An API is an interface used to access services within an architecture like CDSA; it is not the architecture itself.

1. The Open Group. (1999). Common Data Security Architecture (CDSA) Version 2 (Technical Standard C705). In the "Introduction" (Section 1.1

Page 1)

it states

"The Common Data Security Architecture (CDSA) is a set of layered security services... CDSA defines a set of security services and a cryptographic programming interface..."

2. Intel Corporation. (1998). Common Data Security Architecture. Intel Developer Library. In the "What is CDSA?" section

it is described as "an open

cross-platform security architecture... It consists of a set of APIs that allow applications to access security services in a standard way."

3. Kent

S.

& Seo

K. (2005). Security Architecture for the Internet Protocol (RFC 4301). IETF. Section 1.1

"Security Features

" describes IPSec as providing security services at the IP layer

which is distinct from the application-focused

layered architecture described in the question.