Examkin

Question

Difficulty: MediumCIA Triad & Core Security Concepts

A network operations team needs to verify that log files sent from edge firewalls to a central monitoring server are not altered or tampered with during transmission. Which core security principle is the team primarily enforcing, and which technical mechanism achieves this goal?

  1. Integrity, by using SHA-256 cryptographic hashing to verify file consistency.Answer
  2. B
    Confidentiality, by transmitting the log files via HTTPS over TCP port 443.
  3. C
    Availability, by using UDP-based syslog transmission to maximize throughput.
  4. D
    Non-repudiation, by encapsulating syslog payloads into OSI Layer 2 Ethernet frames.

Answer

Integrity, by using SHA-256 cryptographic hashing to verify file consistency.
Integrity is the security principle that ensures data remains accurate and unaltered during transit or storage. Cryptographic hashing algorithms generate a fixed digest of the file; comparing the hash values before and after transmission conclusively proves whether the data was altered.

Step-by-Step Solution

1
Identify the core security requirement described in the scenario.
The requirement is to detect whether log files have been altered or tampered with during transport.
Preventing or detecting unauthorized data modification directly falls under the Integrity pillar of the CIA triad.
2
Select the appropriate technical mechanism for verifying data integrity.
Cryptographic hashing algorithms like SHA-256 produce a unique mathematical digest of the file contents.
If any portion of the transmission is modified, recalculating the SHA-256 hash at the destination yields a mismatch, indicating tampering.

Key Concept

Integrity in the CIA Triad
Rate this question

Topics

CIA Triad & Core Security Concepts

More questions from this topic