Examkin

Question

Difficulty: MediumCIA Triad & Core Security Concepts

A network security team is updating its enterprise defense framework to align existing technical controls with core security principles. Match each core security principle on the left with its corresponding technical control implementation on the right.

  • ConfidentialityImplementing AES-256 BitLocker disk encryption on all remote workstation storage drives
  • IntegrityVerifying cryptographic SHA-256 checksums of network device firmware binaries prior to installation
  • AvailabilityConfiguring redundant load-balanced firewall pairs across dual geographically diverse data centers
  • Non-repudiationRequiring asymmetric PKI digital signatures for all administrator privilege escalation logs

Answer

Confidentiality matches with AES-256 disk encryption; Integrity matches with SHA-256 checksum verification; Availability matches with redundant load-balanced firewalls; Non-repudiation matches with PKI digital signatures on logs.
Each core principle directly aligns with its target control: Confidentiality is sustained by encrypting stored workstation data, Integrity is maintained by validating firmware hash signatures before installation, Availability is preserved through redundant multi-site infrastructure, and Non-repudiation is enforced by cryptographically signing administrative actions.

Step-by-Step Solution

1
Analyze the goal of Confidentiality
Confidentiality protects data against unauthorized disclosure.
Encrypting local storage drives using AES-256 ensures only authenticated key holders can read the contents.
2
Analyze the goal of Integrity
Integrity protects data against unauthorized alteration or corruption.
Hashing firmware images using SHA-256 allows network administrators to verify that binaries match official vendor hashes exactly.
3
Analyze the goal of Availability
Availability guarantees system uptime and access during failures or operational stress.
Geographically redundant firewall pairs prevent service interruptions caused by localized outages or hardware failures.
4
Analyze the goal of Non-repudiation
Non-repudiation ensures auditability such that an actor cannot deny performing a specific operation.
Public Key Infrastructure (PKI) digital signatures cryptographically bind an action log to the administrator's unique key pair.

Key Concept

CIA Triad & Core Security Principles (Confidentiality, Integrity, Availability, Non-repudiation)
Rate this question

Topics

CIA Triad & Core Security Concepts

More questions from this topic