Examkin

Question

Difficulty: MediumCIA Triad and Non-Repudiation

An enterprise security architect is mapping operational security controls to primary security principles within a multi-tier datacenter deployment. Match each operational control on the left with the corresponding core CIA Triad or Non-Repudiation goal on the right.

  • Enforcing AES-256 full disk encryption on database storage volumes holding sensitive client recordsConfidentiality
  • Verifying SHA-256 cryptographic checksums of software installation packages prior to deploymentIntegrity
  • Deploying redundant uninterruptible power supply (UPS) units and automated backup generatorsAvailability
  • Requiring system administrators to digitally sign security policy updates using individual asymmetric private keysNon-Repudiation

Answer

Full disk encryption corresponds to Confidentiality. Cryptographic checksum verification corresponds to Integrity. Redundant power systems correspond to Availability. Asymmetric digital signatures on administrative updates correspond to Non-Repudiation.
Each operational control serves a specific primary security pillar: encryption prevents unauthorized viewing (Confidentiality), checksum comparison ensures data remains unaltered (Integrity), redundant power infrastructure maintains continuous service uptime (Availability), and asymmetric key signatures cryptographically tie an operation to a specific actor so they cannot deny performing it (Non-Repudiation).

Step-by-Step Solution

1
Analyze the primary objective of each listed technical or operational control.
Encryption obscures data from unauthorized eyes; checksums detect unauthorized changes; power redundancy prevents service outage; digital signatures bind actions to a specific identity.
Understanding the security function of each control is necessary before categorizing it within foundational security frameworks.
2
Map each control objective to its foundational security pillar.
Obscuring data maps to Confidentiality; detecting alterations maps to Integrity; preventing outages maps to Availability; binding identity to an immutable action maps to Non-Repudiation.
This completes the precise alignment between implementation mechanisms and security principles.

Key Concept

CIA Triad and Non-Repudiation
Rate this question

Topics

CIA Triad and Non-Repudiation

More questions from this topic