Examkin

Soru

Zorluk: OrtaCIA Triad and Non-Repudiation

An enterprise risk management team is auditing the security controls of an automated insurance claims processing platform. Match each system security implementation on the left to the corresponding security objective (CIA Triad pillar or Non-Repudiation) it primarily satisfies on the right.

  • Encrypting database tables containing policyholder Personally Identifiable Information (PII) using AES-256 to block unauthorized viewing.Confidentiality
  • Validating claim file attachments against SHA-256 cryptographic checksums to detect any unauthorized modification or corruption during transmission.Integrity
  • Deploying load-balanced multi-region web servers with automated failover to maintain operational access during surge periods.Availability
  • Requiring claims adjusters to digitally sign payout approvals using asymmetric key pairs stored on personal hardware tokens to prevent denial of authorization.Non-repudiation

Cevap

Encrypting PII matches Confidentiality; SHA-256 checksum validation matches Integrity; Multi-region load balancing matches Availability; Digital signatures on payout approvals match Non-repudiation.
Each technical safeguard maps directly to one of the four foundational security objectives: encrypting PII ensures Confidentiality; checking SHA-256 hashes ensures Integrity; load balancing ensures Availability; and digital signatures using hardware-backed asymmetric keys ensure Non-repudiation.

Adım Adım Çözüm

1
Analyze the control restricting unauthorized viewing of sensitive PII data
AES-256 database encryption protects privacy by hiding content from unauthorized entities, which maps to Confidentiality.
Confidentiality ensures information is accessible only to authorized users.
2
Analyze the control detecting unauthorized modifications to uploaded files
SHA-256 hash checks verify that data remains unaltered during transit, which maps to Integrity.
Integrity guarantees the accuracy and completeness of data by detecting unauthorized changes.
3
Analyze the control providing system uptime and access during high demand
Multi-region load balancing and redundancy maintain service uptime, which maps to Availability.
Availability ensures systems and data are operational and accessible whenever required.
4
Analyze the control preventing a user from denying a specific transaction or approval
Digital signatures using asymmetric cryptography combine authentication with proof of action, which maps to Non-repudiation.
Non-repudiation prevents an individual from denying the authenticity or origin of a signed document or transaction.

Anahtar Kavram

CIA Triad and Non-Repudiation Core Security Objectives
Bu soruyu puanla

Konular

CIA Triad and Non-Repudiation

Bu konudan daha fazla soru