Which data-link security principle is most important to prevent spoofing or interception of BCC communications?

• A. Authentication and encryption with strict access controls, plus integrity checks.
• B. Relying on a single shared password for all users.
• C. Removing encryption to speed data flow.
• D. Securing only physical devices without network protections.

Answer: (A)

At the data-link level, stopping spoofing and interception comes from proving who is allowed to participate and keeping the transmitted data unread and unaltered. The best protection combines strong authentication to verify devices or users, encryption to keep the content confidential, strict access controls to limit who can join or send on the link, and integrity checks to detect tampering or impersonation. Together, these prevent an attacker from posing as a legitimate device, from listening to or reading messages, and from altering frames in transit.

Relying on a single shared password is insecure because it doesn’t reliably validate individual devices, creates a single point of failure, and doesn’t ensure data integrity or per-user accountability. Removing encryption loses confidentiality and makes the communications easy to eavesdrop on. Securing only physical devices without network protections leaves data vulnerable in transit and doesn’t address spoofing or tampering on the link.