Examkin

Question

Difficulty: MediumCIA Triad & Core Security Concepts

A network administrator is designing security controls for an enterprise application that transmits customer records across an untrusted network. The security policy dictates that the solution must prevent unauthorized eavesdropping on the payload content while also ensuring any unauthorized modifications to the data during transit are detected. Which TWO of the following security measures directly address these requirements?

  1. Encrypting the data payload using Transport Layer Security (TLS)Answer
  2. Appending a Hash-based Message Authentication Code (HMAC) to the transmitted dataAnswer
  3. C
    Configuring SNMPv1 community strings to monitor data transmission metrics
  4. D
    Switching transport layer delivery from TCP to UDP to prevent handshake overhead

Answer

The correct measures are encrypting the payload using Transport Layer Security (TLS) to enforce confidentiality, and appending a Hash-based Message Authentication Code (HMAC) to enforce message integrity.
The scenario requires addressing two pillars of the CIA Triad: Confidentiality (preventing unauthorized viewing) and Integrity (detecting unauthorized modification). Encrypting the payload with Transport Layer Security (TLS) satisfies confidentiality by scrambling data in transit. Using a Hash-based Message Authentication Code (HMAC) satisfies integrity by calculating a cryptographic checksum that reveals any tampering during transmission.

Step-by-Step Solution

1
Identify the required CIA Triad pillars specified in the scenario
Preventing unauthorized eavesdropping maps to Confidentiality; detecting unauthorized modifications during transit maps to Integrity.
Security controls must align specifically with the targeted security goals of confidentiality and integrity.
2
Evaluate cryptographic controls that enforce Confidentiality
Transport Layer Security (TLS) encrypts session traffic, making intercepted payloads unreadable to unauthorized parties.
Encryption is the primary mechanism for maintaining data confidentiality in transit.
3
Evaluate cryptographic controls that enforce Integrity
HMAC calculates a cryptographic digest using a shared key, allowing the receiver to verify that data was not tampered with.
Hashing mechanisms (like HMAC) ensure message integrity by detecting modifications.

Key Concept

CIA Triad (Confidentiality and Integrity Controls for Data in Transit)
Rate this question

Topics

CIA Triad & Core Security Concepts

More questions from this topic