Examkin

Question

Difficulty: HardCIA Triad and Non-Repudiation

An enterprise cloud engineering team is establishing baseline security controls for a newly migrated production environment. Match each technical implementation on the left with the primary security pillar or objective it satisfies on the right.

  • Applying asymmetric digital signatures to automated infrastructure deployment manifests before executionNon-Repudiation
  • Configuring SHA-256 cryptographic checksums coupled with write-once-read-many (WORM) audit loggingIntegrity
  • Deploying active-active multi-region database replicas with automated health-check failoverAvailability
  • Enforcing client-side AES-256-GCM encryption on cloud object storage bucketsConfidentiality

Answer

Asymmetric digital signatures map to Non-Repudiation; SHA-256 hashing with WORM storage maps to Integrity; Active-active multi-region redundancy maps to Availability; Client-side AES-256 encryption maps to Confidentiality.
Each control satisfies its corresponding pillar: asymmetric digital signatures cryptographically bind identity to deployment actions for non-repudiation; SHA-256 hashing with WORM prevents undetected log alteration for integrity; multi-region active-active clustering maintains service uptime for availability; client-side AES-256 encryption prevents unauthorized data viewing for confidentiality.

Step-by-Step Solution

1
Analyze the technical control for proof of origin and author identity.
Asymmetric digital signatures tie deployment actions directly to the signer's private key, establishing non-repudiation.
Non-repudiation ensures an individual or system cannot deny having performed a specific transaction or authorization.
2
Evaluate controls designed to prevent or detect unauthorized data modification.
SHA-256 hashing combined with WORM storage preserves audit records against undetected changes, fulfilling integrity.
Integrity guarantees data accuracy, completeness, and protection against unauthorized modification.
3
Examine operational controls implemented for uptime and disaster recovery.
Multi-region active-active database clustering ensures resources remain accessible during hardware or network failures, maintaining availability.
Availability ensures systems and data are operational and accessible to authorized users whenever needed.
4
Identify controls designed to prevent unauthorized disclosure of stored data.
Client-side AES-256-GCM encryption secures payload data from unauthorized exposure, guaranteeing confidentiality.
Confidentiality protects sensitive data from unauthorized access or disclosure.

Key Concept

CIA Triad and Non-Repudiation
Rate this question

Topics

CIA Triad and Non-Repudiation

More questions from this topic