Examkin

Question

Difficulty: MediumCIA Triad & Core Security Concepts

A network security administrator is establishing data protection policies for automated router configuration backups stored on a remote server. Which TWO of the following technical controls directly safeguard the Integrity pillar of the CIA triad for these backup files?

  1. Calculating SHA-256 cryptographic checksums for each configuration backup immediately after creation and verifying them prior to restorationAnswer
  2. Applying digital signatures to backup file manifests using an enterprise public key infrastructure (PKI)Answer
  3. C
    Encrypting the backup files at rest using AES-256 bit symmetric block ciphers
  4. D
    Transmitting backup files across the network using SSH/SFTP on TCP port 22

Answer

Calculating SHA-256 checksums and applying digital signatures to backup manifests directly safeguard the Integrity pillar of the CIA triad.
Integrity guarantees that data remains authentic, accurate, and safeguard against unauthorized modification. Calculating SHA-256 checksums allows administrators to verify that a backup file has not been corrupted or altered prior to applying it to network equipment. Digital signatures combine asymmetric cryptography with hashing to guarantee both file integrity and origin non-repudiation.

Step-by-Step Solution

1
Identify the core requirement of the CIA triad pillar in question.
The target pillar is Integrity, which focuses on preventing unauthorized modification or corruption of data.
Security controls must be categorized according to whether they preserve confidentiality, integrity, or availability.
2
Evaluate checksums and digital signatures.
SHA-256 hashing and digital signatures provide tamper detection and mathematical proof of unchanged contents.
Both techniques produce verifiable values that change upon any alteration of the underlying file.
3
Evaluate encryption methods.
AES-256 disk encryption and SFTP transport encryption protect data confidentiality by preventing unauthorized disclosure.
Confusing confidentiality mechanisms (encryption) with integrity mechanisms (hashing/signatures) is a common misconception.

Key Concept

CIA Triad - Integrity Controls vs. Confidentiality Controls
Rate this question

Topics

CIA Triad & Core Security Concepts

More questions from this topic