Soru

Zorluk: KolayKey Security Concepts, Threats, Vulnerabilities, and Mitigations

A network engineer configures IPsec encryption on a site-to-site VPN tunnel connecting two corporate offices to ensure that intercepted data packets cannot be read by unauthorized individuals. Which core security principle of the CIA triad is directly achieved by this control?

  1. ConfidentialityCevap
  2. B
    Integrity
  3. C
    Availability
  4. D
    Non-repudiation

Cevap

Confidentiality
Confidentiality ensures that information is kept secret and inaccessible to unauthorized entities. Implementing IPsec encryption scrambles packet payloads into ciphertext, preventing eavesdroppers from reading the contents.

Adım Adım Çözüm

1
Identify the primary objective described in the scenario.
The goal is to prevent unauthorized users from reading intercepted packets sent across the network.
Protecting data secrecy and preventing eavesdropping is the baseline requirement.
2
Map the technical control (IPsec encryption) to its corresponding CIA triad pillar.
Encryption renders plaintext data unreadable without the secret key, fulfilling the requirement for confidentiality.
Confidentiality is specifically concerned with keeping data hidden from unauthorized eyes.

Anahtar Kavram

CIA Triad: Confidentiality
Tahmini Süre:45s
Bu soruyu puanla