Examkin

Soru

Zorluk: OrtaCIA Triad & Core Security Concepts

An enterprise organization is mitigating two distinct security concerns regarding its web services: unauthorized tampering of REST API transactional data in transit, and frequent web server unresponsiveness caused by TCP SYN flood attacks. Which TWO of the following security mechanisms directly address the Integrity and Availability pillars of the CIA triad to mitigate these specific issues? (Select TWO)

  1. Implementation of HMAC (Hash-based Message Authentication Code) validation for API payload transmissionsCevap
  2. Deployment of perimeter SYN proxy appliances with automated TCP rate-limiting capabilitiesCevap
  3. C
    Enforcement of AES-256 bit encryption across all backend database storage volumes at rest
  4. D
    Implementation of RADIUS authentication for network administrator out-of-band management access

Cevap

The correct mechanisms are implementing HMAC validation for API payloads (protecting Integrity against tampering in transit) and deploying SYN proxy appliances with rate-limiting (protecting Availability against SYN flood attacks).
HMAC verification protects payload Integrity by ensuring API transaction data is not modified during transit. Deploying a SYN proxy protects service Availability by absorbing spoofed TCP connection floods, keeping backend services operational.

Adım Adım Çözüm

1
Analyze the security concern regarding API data tampering in transit.
Unauthorized modification of data during transmission is an Integrity violation.
HMAC uses a cryptographic hashing technique combined with a secret key to ensure data has not been altered between sender and receiver.
2
Analyze the security concern regarding TCP SYN flood attacks.
SYN floods attempt to exhaust server resources to make services unreachable, violating Availability.
Perimeter SYN proxies manage TCP handshakes on behalf of protected servers, preventing half-open connection state table exhaustion.
3
Evaluate distractors against the required security pillars.
Volume encryption ensures Confidentiality at rest, while RADIUS provides AAA administrative access control.
Neither storage encryption nor administrative AAA resolves transit payload tampering or active network denial-of-service incidents.

Anahtar Kavram

CIA Triad Principles (Integrity and Availability Controls)
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

CIA Triad & Core Security Concepts

Bu konudan daha fazla soru