100-160 Question 8
Select 4A company is implementing security measures to protect its data and systems. The IT manager emphasizes the importance of confidentiality, integrity, and availability when designing these measures. Which of the following actions align with these essential security principles?
- A
Encrypting sensitive files before storage to prevent unauthorized access
- B
Regularly backing up data to ensure it can be restored in case of a failure
- C
Using multi-factor authentication to restrict access to critical systems
- D
Allowing employees to share their passwords for easier collaboration
- E
Monitoring system logs for suspicious activities to detect potential breaches
Show answer and explanation
Correct answers: A, B, C, E
Explanation
The essential security principles of confidentiality, integrity, and availability (CIA triad) guide the design of security measures. Confidentiality ensures that sensitive information is protected from unauthorized access, integrity ensures data accuracy and trustworthiness, and availability ensures that authorized users can access systems and data when needed. Actions like encryption, backups, multi-factor authentication, and log monitoring align with these principles. However, sharing passwords undermines security and violates the CIA triad.
- A. Correct.
Encrypting sensitive files ensures confidentiality by preventing unauthorized access to data.
- B. Correct.
Regularly backing up data supports availability by ensuring recovery in case of data loss or system failure.
- C. Correct.
Using multi-factor authentication enhances confidentiality by ensuring that only authorized users can access critical systems.
- D. Incorrect.
Allowing employees to share passwords violates confidentiality and increases the risk of unauthorized access.
- E. Correct.
Monitoring system logs helps maintain integrity by identifying potential breaches or unauthorized changes in a timely manner.