100-150 Question 272
Select 3A network administrator notices unusual login attempts on the company’s internal systems. To secure the network, they implement user authentication, data encryption, and network segmentation. Which foundational security concepts are being applied in this scenario?
- A
Confidentiality
- B
Integrity
- C
Availability
- D
Least Privilege
- E
Defense in Depth
Show answer and explanation
Correct answers: A, C, E
Explanation
The foundational security concepts of confidentiality, availability, and defense in depth are illustrated in this scenario. Confidentiality is protected through authentication and encryption, availability is supported by network segmentation, and defense in depth is demonstrated through the layered security approach.
- A. Correct.
Confidentiality is applied through user authentication and data encryption, as these measures protect sensitive information from unauthorized access.
- B. Incorrect.
Integrity is not explicitly addressed in this scenario, as there is no indication of mechanisms to ensure data has not been altered.
- C. Correct.
Availability is addressed through network segmentation, which can prevent unauthorized access and ensure the system remains operational for legitimate users.
- D. Incorrect.
Least Privilege is not directly mentioned, as the scenario does not describe restricting user access to only necessary resources.
- E. Correct.
Defense in Depth is applied by implementing multiple layers of security, such as authentication, encryption, and segmentation, to protect the network.