100-150 Question 275
Select 3An organization stores sensitive customer data on a cloud-based platform. To ensure the security of this data, they implement a solution that involves verifying user identity through a password and a text message code, encrypting the data in transit and at rest, and requiring unique user permissions for accessing the data. Which combination of concepts is the organization using in this scenario?
- A
Confidentiality, Integrity, and Availability (CIA)
- B
Authentication, Authorization, and Accounting (AAA)
- C
Multifactor Authentication (MFA)
- D
Certificates for identity verification
Show answer and explanation
Correct answers: A, B, C
Explanation
This scenario demonstrates a combination of security principles. The organization implements the CIA triad by encrypting sensitive data and managing access permissions to ensure confidentiality and availability. It also applies AAA principles by authenticating users, authorizing access, and potentially logging activity for accounting. Additionally, MFA is used to enhance security by requiring two forms of authentication. Certificates are not explicitly mentioned in this scenario.
- A. Correct.
The organization ensures confidentiality by encrypting the data and controls availability through user permissions, which are components of the CIA triad.
- B. Correct.
The organization employs AAA by verifying user identity (authentication), assigning unique permissions (authorization), and potentially tracking access for logging purposes (accounting).
- C. Correct.
The use of a password and a text message code represents Multifactor Authentication (MFA), as it involves two factors, something the user knows (password) and something the user has (text message code).
- D. Incorrect.
Although certificates can be used for identity verification, the scenario specifically mentions encryption and MFA, not certificates, as part of the solution.