Examkin

Question

Difficulty: MediumCIA Triad and Non-Repudiation

Match each enterprise security technical implementation to the specific security pillar or concept it primarily satisfies.

  • ConfidentialityEncrypting sensitive customer financial records stored in a cloud database to prevent unauthorized viewing.
  • IntegrityGenerating SHA-256 checksums for software installation packages to detect unauthorized modification.
  • AvailabilityDeploying dual power supplies and load-balanced web server clusters to prevent service downtime.
  • Non-RepudiationSigning executive wire transfer requests with asymmetric private keys to guarantee proof of authorship.

Answer

Confidentiality matches encrypting sensitive customer records; Integrity matches generating SHA-256 checksums for binaries; Availability matches deploying redundant power and load-balanced clusters; Non-Repudiation matches signing executive transfer requests with asymmetric private keys.
Each control satisfies a specific pillar: encryption prevents disclosure (Confidentiality); hashing detects unauthorized changes (Integrity); hardware redundancy maintains system access (Availability); private key signing binds identity to transactions (Non-Repudiation).

Step-by-Step Solution

1
Determine the security goal of encryption at rest.
Encryption restricts reading data to keyholders, satisfying Confidentiality.
Confidentiality focuses on preventing unauthorized disclosure of information.
2
Analyze the function of cryptographic checksums (SHA-256).
Hashing detects any modification in transit or storage, satisfying Integrity.
Integrity guards against unauthorized data modification or corruption.
3
Evaluate the purpose of dual power feeds and server clustering.
Redundancy mitigates single points of failure to maintain uptime, satisfying Availability.
Availability ensures hardware and software systems remain operational and accessible.
4
Identify the protection provided by asymmetric private key signatures.
Digital signatures bind identity to data so authorship cannot be refuted, satisfying Non-Repudiation.
Non-repudiation prevents an entity from denying their prior actions or messages.

Key Concept

CIA Triad and Non-Repudiation core principles and technical controls
Rate this question

Topics

CIA Triad and Non-Repudiation

More questions from this topic