A enterprise network security architect is updating the organization's defensive baseline to ensure alignment with core security architecture principles. Match each operational technical control on the left with the primary security pillar or principle it directly satisfies on the right.
- Configuring automated pre-boot verification of SHA-256 cryptographic checksums for network switch firmware imagesIntegrity
- Implementing IPsec Encapsulating Security Payload (ESP) in Transport Mode with AES-256 for all management trafficConfidentiality
- Deploying dual redundant hot-swappable power supplies connected to independent uninterruptible power supply (UPS) circuitsAvailability
- Requiring administrator audit logs to be signed using asymmetric private keys prior to centralized log server archivingNon-repudiation
Cevap
Firmware checksum verification maps to Integrity; IPsec ESP AES encryption maps to Confidentiality; Redundant power supplies and UPS feeds map to Availability; Digitally signed audit logs map to Non-repudiation.
Each security control is matched to its core security objective: SHA-256 firmware hash checks ensure data is uncorrupted (Integrity); IPsec ESP AES encryption hides network traffic from unauthorized listeners (Confidentiality); dual power supplies with separate UPS backups prevent unplanned downtime (Availability); and digital signatures on audit logs prevent administrators from denying their actions (Non-repudiation).
Adım Adım Çözüm
Anahtar Kavram
CIA Triad and Security Principles Mapping
Tahmini Süre:2m 0s