Examkin

Soru

Zorluk: OrtaCIA Triad & Core Security Concepts

A network administrator is designing security controls for transmitting sensitive corporate financial records between two remote office sites over an untrusted public network. The controls must ensure that unauthorized parties cannot intercept and read the data, and that any tampering during transit is immediately detected. Which TWO of the following technical mechanisms should the administrator implement to satisfy these requirements? (Select TWO.)

  1. Encapsulating Security Payload (ESP) encryption to enforce data confidentialityCevap
  2. Hash-based Message Authentication Codes (HMAC) to guarantee data integrityCevap
  3. C
    Redundant Uninterruptible Power Supply (UPS) units to ensure continuous network availability
  4. D
    User Datagram Protocol (UDP) multiplexing to guarantee reliable stream delivery

Cevap

Encapsulating Security Payload (ESP) encryption and Hash-based Message Authentication Codes (HMAC) are the correct mechanisms.
Encapsulating Security Payload (ESP) encryption ensures that data payload contents cannot be read by unauthorized interceptors (Confidentiality). Hash-based Message Authentication Codes (HMAC) ensure that any changes made to the data during transit can be detected by verifying the cryptographic hash (Integrity). Together, these mechanisms satisfy both mandatory requirements.

Adım Adım Çözüm

1
Identify the confidentiality requirement
Preventing unauthorized interception and reading of data in transit requires payload encryption.
Encryption transforms plaintext into ciphertext so unauthenticated listeners cannot decode the content.
2
Identify the integrity requirement
Detecting unauthorized tampering or modification of data in transit requires cryptographic hashing or message authentication codes.
Integrity mechanisms allow the recipient to verify that packet contents have not altered since transmission.
3
Select matching technical controls
ESP encryption delivers confidentiality, and HMAC delivers data integrity.
These controls directly map to the confidentiality and integrity pillars of the CIA triad.

Anahtar Kavram

CIA Triad: Confidentiality and Integrity Controls in Transit
Bu soruyu puanla

Konular

CIA Triad & Core Security Concepts

Bu konudan daha fazla soru