Examkin

Question

Difficulty: MediumCIA Triad & Core Security Concepts

An enterprise organization is mitigating two distinct security concerns regarding its web services: unauthorized tampering of REST API transactional data in transit, and frequent web server unresponsiveness caused by TCP SYN flood attacks. Which TWO of the following security mechanisms directly address the Integrity and Availability pillars of the CIA triad to mitigate these specific issues? (Select TWO)

  1. Implementation of HMAC (Hash-based Message Authentication Code) validation for API payload transmissionsAnswer
  2. Deployment of perimeter SYN proxy appliances with automated TCP rate-limiting capabilitiesAnswer
  3. C
    Enforcement of AES-256 bit encryption across all backend database storage volumes at rest
  4. D
    Implementation of RADIUS authentication for network administrator out-of-band management access

Answer

The correct mechanisms are implementing HMAC validation for API payloads (protecting Integrity against tampering in transit) and deploying SYN proxy appliances with rate-limiting (protecting Availability against SYN flood attacks).
HMAC verification protects payload Integrity by ensuring API transaction data is not modified during transit. Deploying a SYN proxy protects service Availability by absorbing spoofed TCP connection floods, keeping backend services operational.

Step-by-Step Solution

1
Analyze the security concern regarding API data tampering in transit.
Unauthorized modification of data during transmission is an Integrity violation.
HMAC uses a cryptographic hashing technique combined with a secret key to ensure data has not been altered between sender and receiver.
2
Analyze the security concern regarding TCP SYN flood attacks.
SYN floods attempt to exhaust server resources to make services unreachable, violating Availability.
Perimeter SYN proxies manage TCP handshakes on behalf of protected servers, preventing half-open connection state table exhaustion.
3
Evaluate distractors against the required security pillars.
Volume encryption ensures Confidentiality at rest, while RADIUS provides AAA administrative access control.
Neither storage encryption nor administrative AAA resolves transit payload tampering or active network denial-of-service incidents.

Key Concept

CIA Triad Principles (Integrity and Availability Controls)
Estimated Time:1m 30s
Rate this question

Topics

CIA Triad & Core Security Concepts

More questions from this topic