A water utility’s remote reservoirs rely on satellite and microwave backhaul that can be intercepted or spoofed. Which protection best addresses integrity and confidentiality for that data path?
Select an answer to reveal the explanation.
Short Explanation
Microwave and satellite hops are just long wireless hallways—anyone with the right gear can listen or inject if the traffic is naked. Wrap the backhaul in strong encryption and authentication so reservoir readings stay private and trustworthy. Taller towers, “secret” SCADA formats, and turning off integrity checks do not fix a cleartext radio path.
Full Explanation
Satellite and microwave backhaul are exposed wireless media; confidentiality and integrity must be enforced cryptographically rather than assumed from geographic isolation. Authenticated encryption such as IPsec (or equivalent link/application protections) prevents eavesdropping and unauthorized modification of telemetry and control traffic. Physical antenna placement does not stop RF interception, and proprietary framing is not a substitute for cryptography. Removing integrity checks increases the risk of undetected spoofing on critical utility links.