Question

Difficulty: EasyKey Security Concepts, Threats, Vulnerabilities, and Mitigations

A network engineer configures IPsec encryption on a site-to-site VPN tunnel connecting two corporate offices to ensure that intercepted data packets cannot be read by unauthorized individuals. Which core security principle of the CIA triad is directly achieved by this control?

  1. ConfidentialityAnswer
  2. B
    Integrity
  3. C
    Availability
  4. D
    Non-repudiation

Answer

Confidentiality
Confidentiality ensures that information is kept secret and inaccessible to unauthorized entities. Implementing IPsec encryption scrambles packet payloads into ciphertext, preventing eavesdroppers from reading the contents.

Step-by-Step Solution

1
Identify the primary objective described in the scenario.
The goal is to prevent unauthorized users from reading intercepted packets sent across the network.
Protecting data secrecy and preventing eavesdropping is the baseline requirement.
2
Map the technical control (IPsec encryption) to its corresponding CIA triad pillar.
Encryption renders plaintext data unreadable without the secret key, fulfilling the requirement for confidentiality.
Confidentiality is specifically concerned with keeping data hidden from unauthorized eyes.

Key Concept

CIA Triad: Confidentiality
Estimated Time:45s
Rate this question