Examkin

Soru

Zorluk: KolayKey Security Concepts, Threats, Vulnerabilities, and Mitigations

A security analyst is reviewing measures to enforce the Confidentiality, Integrity, and Availability (CIA) triad across an enterprise network. Which of the following security controls directly address the Integrity leg of the CIA triad? (Select two.)

  1. Applying cryptographic hash functions (such as SHA-256) to verify system configuration filesCevap
  2. B
    Deploying AES encryption for all data traversing remote access VPN connections
  3. Utilizing asymmetric digital signatures to validate the authenticity and unmodified state of software updatesCevap
  4. D
    Configuring redundant hardware components and high-availability routing protocols across core switches

Cevap

Cryptographic hash functions (such as SHA-256) and digital signatures directly enforce data Integrity by detecting unauthorized modifications.
Data Integrity ensures that information is accurate and unaltered during storage or transit. Using SHA-256 cryptographic hashing allows systems to verify file content against expected checksums. Digital signatures use hashing combined with public key infrastructure to ensure software updates remain unaltered and authentic.

Adım Adım Çözüm

1
Define the Integrity component of the CIA triad.
Integrity ensures that network data and system configurations remain accurate, complete, and protected against unauthorized modification or tampering.
Security controls for integrity must detect or prevent unauthorized alterations to data.
2
Evaluate mechanisms that protect or verify data against alteration.
SHA-256 hashing generates a unique checksum to detect file changes, and digital signatures verify both sender identity and content immutability.
Both techniques specifically address data tampering and change detection.

Anahtar Kavram

CIA Triad - Integrity Security Controls
Bu soruyu puanla

Konular

Key Security Concepts, Threats, Vulnerabilities, and Mitigations

Bu konudan daha fazla soru