Examkin

Soru

Zorluk: ZorCIA Triad & Core Security Concepts

A healthcare organization experiences an outage on its web-based patient portal after a misconfigured network backup script fails to clear temporary files, causing the primary storage volume to fill completely and crashing the service. Although all patient records remained securely encrypted at rest and no data was accessed or altered by unauthorized parties, clinical staff were unable to access critical patient records for three hours. Which pillar of the CIA triad was directly compromised in this incident?

  1. Availability, because authorized users were denied timely and reliable access to systems and data.Cevap
  2. B
    Confidentiality, because administrative backup scripts failed to execute within secure operational boundaries.
  3. C
    Integrity, because the failure of the script corrupted the underlying file structure of the backup volume.
  4. D
    Non-repudiation, because the automated backup system could not validate the identity of the process owner.

Cevap

Availability, because authorized users were denied timely and reliable access to systems and data.
The correct answer highlights that Availability was breached. The CIA triad defines Availability as ensuring that network services and data remain accessible to authorized users when needed. In this scenario, storage exhaustion caused a service crash that prevented clinical staff from accessing critical patient data for three hours, directly violating the availability principle while data confidentiality and integrity remained uncompromised.

Adım Adım Çözüm

1
Analyze the impact of the incident described in the scenario.
Patient records remained encrypted (no exposure) and unaltered (no modification), but legitimate healthcare personnel were unable to retrieve patient files when needed.
Determining which core security objective was impaired requires evaluating what failed: exposure, modification, or access.
2
Map the impact to the pillars of the CIA Triad.
The failure prevented timely access for authorized users, which directly corresponds to a loss of Availability.
Availability guarantees that system resources and data are reachable and operational whenever authorized entities require them.

Anahtar Kavram

CIA Triad Pillars (Confidentiality, Integrity, Availability)
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

CIA Triad & Core Security Concepts

Bu konudan daha fazla soru