Examkin

Soru

Zorluk: ZorCIA Triad & Core Security Concepts

An enterprise network architect is evaluating security controls across a multi-tier network deployment. Match each technical implementation on the left with the core security principle or objective it primarily satisfies on the right.

  • Enforcing Ephemeral Diffie-Hellman (ECDHE) key exchange for secure web gateway TLS connectionsConfidentiality (protecting session data against retrospective decryption)
  • Implementing SHA-256 HMAC checksum validation on dynamic routing protocol updatesIntegrity (preventing unauthorized tampering of routing data in transit)
  • Deploying BGP Anycast routing paired with multi-datacenter active-active firewall clustersAvailability (ensuring continuous service operation during localized hardware failures or DDoS events)
  • Applying PKI asymmetric digital signatures with cryptographic timestamps to automated network audit logsNon-repudiation (proving log authenticity and origin without possibility of denial)

Cevap

The correct pairings match ECDHE key exchange with Confidentiality, SHA-256 HMAC validation with Integrity, BGP Anycast active-active architecture with Availability, and PKI asymmetric signatures with Non-repudiation.
Each control is paired with its primary objective: ECDHE protects session confidentiality via forward secrecy; HMAC validation guarantees data integrity by detecting unauthorized alterations; BGP Anycast with active-active clustering guarantees system availability through fault tolerance; digital signing of logs ensures non-repudiation by mathematically tying log generation to the signing entity.

Adım Adım Çözüm

1
Analyze the objective of ECDHE key exchange
Identified that ephemeral keys protect past session data from future compromise (Confidentiality).
Perfect Forward Secrecy ensures encrypted traffic remains confidential even if long-term credentials leak.
2
Analyze HMAC usage in network routing protocols
Identified that hash-based message authentication codes detect unauthorized payload modifications (Integrity).
Cryptographic hashes verify payload data remains unchanged between peers.
3
Analyze multi-datacenter active-active clustering with BGP Anycast
Identified that fault-tolerant and distributed network infrastructure maintains uptime (Availability).
Redundancy and load distribution prevent single points of failure from causing outages.
4
Analyze asymmetric digital signatures on audit records
Identified that private-key signing prevents a system or user from denying log generation (Non-repudiation).
Digital signatures bind identity cryptographically to specific data at a specific time.

Anahtar Kavram

Mapping Advanced Network Security Controls to CIA Triad and Non-repudiation Principles
Bu soruyu puanla

Konular

CIA Triad & Core Security Concepts

Bu konudan daha fazla soru