Which type of administrative access must be encrypted using strong cryptography?

• A. Only console administrative access.
• B. All non-console administrative access.
• C. All user data on workstations.
• D. External vendor access only.

Answer: (B)

Administrative access that travels over a network must be protected in transit with strong cryptography. Non-console administrative access refers to remote, network-based sessions (like SSH, RDP, or VPN) used to administer systems, and these sessions carry credentials and commands that could be intercepted if not encrypted. Console access is local and doesn’t traverse a network, so the in-transit encryption requirement doesn’t apply to it. Other options miss the scope of the requirement, which targets remote administrative sessions. Therefore, all non-console administrative access must be encrypted using strong cryptography.