100-150 Question 278
Select 4A company is implementing a secure system for employees to access sensitive data remotely. They want to ensure data confidentiality, integrity, and availability (CIA), while also verifying user identities with strong security measures. Which combination of technologies should the company prioritize?
- A
Multifactor Authentication (MFA)
- B
Encryption
- C
Digital Certificates
- D
Network Address Translation (NAT)
- E
Role-Based Access Control (RBAC)
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To ensure the security of sensitive data and align with the CIA triad, the company should implement technologies that address confidentiality (encryption, MFA), integrity (digital certificates), and controlled access (RBAC). NAT, while useful for IP address management, does not directly contribute to the goals of CIA or strong user authentication.
- A. Correct.
Multifactor Authentication (MFA) adds an extra layer of security by requiring multiple forms of verification, ensuring only authenticated users can access sensitive data. This supports the authentication and confidentiality aspects of the CIA triad.
- B. Correct.
Encryption secures data by converting it into a coded format, protecting it from unauthorized access and ensuring confidentiality during data transmission and storage.
- C. Correct.
Digital certificates provide a mechanism to verify identities and secure communications, contributing to the integrity and authenticity of data exchanges.
- D. Incorrect.
Network Address Translation (NAT) is primarily used for conserving IP addresses and masking internal IP addresses, but it does not directly support the CIA triad or strong user authentication.
- E. Correct.
Role-Based Access Control (RBAC) ensures users only access data or systems they are authorized for, supporting both confidentiality and the authorization aspect of AAA.