Examkin

Soru

Zorluk: OrtaCIA Triad & Core Security Concepts

A network security architect is reviewing the organization's technical controls to ensure alignment with foundational security principles. Match each core security principle on the left with the technical control on the right that primarily enforces it.

  • ConfidentialityEnforcing AES-256 encryption on SSH administrative sessions to prevent network sniffing
  • IntegrityVerifying SHA-256 cryptographic hashes of router firmware images before deployment
  • AvailabilityDeploying redundant ISP connections configured with automated BGP failover
  • Non-repudiationRequiring asymmetric digital signatures on system configuration change requests

Cevap

Confidentiality pairs with enforcing AES-256 encryption on SSH administrative sessions; Integrity pairs with verifying SHA-256 hashes of router firmware images; Availability pairs with deploying redundant ISP connections with automated BGP failover; Non-repudiation pairs with requiring asymmetric digital signatures on configuration change requests.
Each core security goal aligns with a specific defensive mechanism: encryption enforces confidentiality by hiding data from unauthorized viewers; cryptographic hashing enforces integrity by verifying data hasn't been altered; hardware and path redundancy maintains availability against failures; digital signatures enforce non-repudiation by mathematically linking an action to a specific party.

Adım Adım Çözüm

1
Analyze Confidentiality controls
Confidentiality prevents unauthorized access to sensitive information. Encrypting management sessions using AES-256 renders the data unreadable to unauthorized sniffers.
Encryption is the primary mechanism for preserving confidentiality of data in transit.
2
Analyze Integrity controls
Integrity ensures data has not been modified or corrupted. Verifying SHA-256 hashes confirms that firmware code matches the original published release without unauthorized alterations.
Cryptographic hashing provides verification of data integrity.
3
Analyze Availability controls
Availability guarantees that network assets and services are operational when required. Dual ISP links with automated BGP failover maintain connectivity during provider outages.
Redundancy and failover mechanisms preserve service availability.
4
Analyze Non-repudiation controls
Non-repudiation ensures an actor cannot deny performing a specific authorization or transaction. Asymmetric digital signatures link specific cryptographic keys to signed requests.
Digital signatures bind identity and action using asymmetric cryptography to enforce non-repudiation.

Anahtar Kavram

CIA Triad and Core Security Principles
Bu soruyu puanla

Konular

CIA Triad & Core Security Concepts

Bu konudan daha fazla soru