Examkin

Question

Difficulty: EasyKey Security Concepts, Threats, Vulnerabilities, and Mitigations

A security analyst is reviewing measures to enforce the Confidentiality, Integrity, and Availability (CIA) triad across an enterprise network. Which of the following security controls directly address the Integrity leg of the CIA triad? (Select two.)

  1. Applying cryptographic hash functions (such as SHA-256) to verify system configuration filesAnswer
  2. B
    Deploying AES encryption for all data traversing remote access VPN connections
  3. Utilizing asymmetric digital signatures to validate the authenticity and unmodified state of software updatesAnswer
  4. D
    Configuring redundant hardware components and high-availability routing protocols across core switches

Answer

Cryptographic hash functions (such as SHA-256) and digital signatures directly enforce data Integrity by detecting unauthorized modifications.
Data Integrity ensures that information is accurate and unaltered during storage or transit. Using SHA-256 cryptographic hashing allows systems to verify file content against expected checksums. Digital signatures use hashing combined with public key infrastructure to ensure software updates remain unaltered and authentic.

Step-by-Step Solution

1
Define the Integrity component of the CIA triad.
Integrity ensures that network data and system configurations remain accurate, complete, and protected against unauthorized modification or tampering.
Security controls for integrity must detect or prevent unauthorized alterations to data.
2
Evaluate mechanisms that protect or verify data against alteration.
SHA-256 hashing generates a unique checksum to detect file changes, and digital signatures verify both sender identity and content immutability.
Both techniques specifically address data tampering and change detection.

Key Concept

CIA Triad - Integrity Security Controls
Rate this question

Topics

Key Security Concepts, Threats, Vulnerabilities, and Mitigations

More questions from this topic