Soru

Zorluk: OrtaCIA Triad & Core Security Concepts

A network security administrator is aligning enterprise operational controls with fundamental security principles. Match each security mechanism or operational scenario to the core CIA Triad or security concept it primarily enforces.

  • Encrypting web application session tokens in transit using TLS 1.3Confidentiality
  • Generating and validating SHA-256 checksums for software installation packagesIntegrity
  • Deploying redundant fault-tolerant SAN storage arrays across dual power feedsAvailability
  • Requiring asymmetric digital signatures on electronic contract documentsNon-repudiation

Cevap

Encrypting web application session tokens maps to Confidentiality; SHA-256 checksum validation maps to Integrity; Redundant SAN storage and dual power feeds map to Availability; Asymmetric digital signatures map to Non-repudiation.
Each mechanism aligns directly with its fundamental security goal: TLS encryption safeguards confidentiality against interception; SHA-256 hashing preserves integrity by verifying data unalterability; redundant hardware ensures availability via continuous service; digital signatures establish non-repudiation by mathematically binding signers to data.

Adım Adım Çözüm

1
Analyze encrypting web application session tokens
Identified goal as preventing eavesdropping and unauthorized inspection
Protecting data from unauthorized disclosure is the definition of Confidentiality.
2
Analyze SHA-256 checksum validation
Identified goal as verifying data hasn't been altered or corrupted
Ensuring data accuracy and preventing unauthorized tampering is the core purpose of Integrity.
3
Analyze redundant SAN storage and dual power feeds
Identified goal as maintaining operational uptime and preventing single points of failure
Guaranteeing reliable access to data and systems for authorized users defines Availability.
4
Analyze asymmetric digital signatures on contract documents
Identified goal as proving document origin and authenticity without denial
Providing cryptographic proof of source identity so an entity cannot deny an action satisfies Non-repudiation.

Anahtar Kavram

CIA Triad & Core Security Concepts
Bu soruyu puanla