200-201 Question 1
Select 2A cybersecurity analyst is tasked with identifying security risks in a company's network. During the assessment, the analyst discovers that several outdated systems are running without encryption and that employees frequently fall victim to phishing attacks. Based on the CIA triad principles, which two security objectives are most directly impacted by these issues?
- A
Confidentiality
- B
Integrity
- C
Availability
- D
Authentication
- E
Non-repudiation
Show answer and explanation
Correct answers: A, B
Explanation
The CIA triad (Confidentiality, Integrity, Availability) is a foundational security model. In this scenario, outdated systems without encryption pose a risk to Confidentiality by exposing sensitive data, and phishing attacks threaten Integrity by allowing unauthorized manipulation of data. Availability is not impacted, as the described issues do not involve service interruptions.
- A. Correct.
Confidentiality is impacted because outdated systems without encryption allow unauthorized individuals to potentially access sensitive data.
- B. Correct.
Integrity is affected because phishing attacks can lead to unauthorized changes to data, compromising its accuracy and reliability.
- C. Incorrect.
Availability is not directly impacted in this scenario, as there is no evidence of denial-of-service attacks or system downtime caused by these issues.
- D. Incorrect.
Authentication is not directly relevant in this context because the described issues involve encryption and phishing, not user identity verification mechanisms.
- E. Incorrect.
Non-repudiation is not related to this scenario, as it deals with ensuring that actions or transactions cannot be denied by the user or entity that performed them.