Examkin

Soru

Zorluk: ZorCIA Triad & Core Security Concepts

During a forensic analysis at a financial services organization, network engineers discover that an attacker executed a man-in-the-middle attack on an internal subnet between an application server and a SQL database. The attacker intercepted automated database queries and modified financial balances inside the packet payloads in transit without interrupting the TCP session or altering packet lengths. System uptime, server access, and network performance remained completely normal throughout the event. Which security principle of the CIA triad was directly violated, and which security control best mitigates this vulnerability?

  1. A
    Confidentiality; this should be mitigated by enforcing WPA3-Enterprise authentication across all internal switches.
  2. B
    Availability; this should be mitigated by deploying SNMPv3 with authPriv to monitor system uptime and alert administrators to data packet changes.
  3. C
    Non-repudiation; this should be mitigated by replacing RADIUS with TACACS+ to encrypt the PDU payload between hosts.
  4. Integrity; this should be mitigated by enforcing IPsec using Encapsulating Security Payload (ESP) or HMAC message authentication to prevent undetected data tampering.Cevap

Cevap

Integrity was compromised because the transaction payload was modified during transmission. Deploying IPsec with Encapsulating Security Payload (ESP) or HMAC message authentication protects data integrity.
The scenario describes an unauthorized alteration of data during transmission between two endpoints without causing downtime or session loss. Integrity ensures that information remains unchanged and untampered with while stored or in transit. Implementing IPsec ESP or HMAC integrity checks ensures that any modified packet is detected via hash mismatch and immediately dropped.

Adım Adım Çözüm

1
Analyze the attack impact described in the scenario
Data within packet payloads was manipulated in transit, while network availability and access remained unaffected.
Determining which aspect of the data or service was impacted isolates the specific pillar of the CIA triad.
2
Map the impact to the core CIA triad security principles
Unauthorized modification of data directly violates Integrity.
Integrity guarantees that data remains in an unaltered state from source to destination.
3
Select the appropriate network security control to protect integrity in transit
IPsec ESP (or cryptographic hashing/HMAC) validates packet checksums and prevents payload tampering.
Cryptographic authentication headers detect unauthorized modifications and discard corrupted packets before processing.

Anahtar Kavram

CIA Triad - Integrity & Cryptographic Message Protection
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

CIA Triad & Core Security Concepts

Bu konudan daha fazla soru