Examkin

Question

Difficulty: HardCIA Triad & Core Security Concepts

A network security engineer is designing an automated system to transmit high-value financial transaction logs between remote data centers across a public network. The security baseline specifies that the system must ensure data cannot be altered during transit without detection, while also cryptographically preventing the sending system from denying it originated the log transmission. Which of the following security mechanisms should the engineer implement to fulfill these specific security principles? (Select TWO.)

  1. Asymmetric digital signatures applied to each log payload using private keysAnswer
  2. B
    Symmetric payload encryption using AES-256 in Cipher Block Chaining mode
  3. Cryptographic message digest generation using SHA-256 appended to the transfer protocolAnswer
  4. D
    Deploying redundant VRRP virtual gateway routers across dual internet service provider links

Answer

The required security principles are Integrity and Non-repudiation. Cryptographic message digests (such as SHA-256 hashes) ensure Integrity by verifying that data has not been altered in transit. Asymmetric digital signatures ensure both Integrity and Non-repudiation by using a private key to sign the data, allowing any party with the public key to verify authenticity and origin.
Digital signatures provide non-repudiation and integrity through asymmetric cryptography, while cryptographic hashing (SHA-256) verifies payload integrity by enabling detectability of any modifications in transit.

Step-by-Step Solution

1
Analyze the requirements stated in the scenario stem.
Identified two target core security requirements: detecting unauthorized alterations in transit (Integrity) and cryptographically proving the sender's identity to prevent denial of origin (Non-repudiation).
Matching technical security controls directly to specific CIA triad pillars and related core principles is required.
2
Evaluate technical controls for Integrity.
Cryptographic hashing (SHA-256) generates a unique checksum derived from the original payload. Any tampering during transit alters the checksum at the destination, fulfilling the integrity requirement.
Hashing functions provide data verification against tampering.
3
Evaluate technical controls for Non-repudiation and Integrity combined.
Asymmetric digital signatures use the sender's private key to sign the hash of the message. Because only the sender possesses the private key, successful verification with the corresponding public key guarantees both origin authenticity (non-repudiation) and payload integrity.
Asymmetric key pairs bind identity to transaction signatures.

Key Concept

CIA Triad & Core Security Principles (Integrity and Non-repudiation)
Rate this question

Topics

CIA Triad & Core Security Concepts

More questions from this topic