200-201 Question 39
Select 3You are a cybersecurity analyst investigating a recent data breach. The attacker exploited a vulnerability in a company's web application to gain unauthorized access to sensitive data. To prevent similar incidents in the future, the team discusses implementing security measures like encryption, access controls, and regular vulnerability assessments. Which of the following security concepts are being addressed in this discussion?
- A
Confidentiality
- B
Integrity
- C
Availability
- D
Authentication
- E
Non-repudiation
Show answer and explanation
Correct answers: A, B, C
Explanation
The discussion revolves around implementing measures to ensure the confidentiality, integrity, and availability of data and systems. These are the core principles of the CIA triad in cybersecurity. Confidentiality is maintained through encryption and access controls, integrity is ensured with vulnerability assessments, and availability is indirectly supported by securing systems against threats.
- A. Correct.
Confidentiality is addressed by encrypting sensitive data and implementing access controls to ensure that only authorized individuals can access the information.
- B. Correct.
Integrity is addressed by performing regular vulnerability assessments to identify and mitigate potential risks that could compromise the accuracy and reliability of the data.
- C. Correct.
Availability is addressed by ensuring that systems remain operational and secure, which is an implicit goal of vulnerability assessments and access control measures.
- D. Incorrect.
Authentication, while important, is not explicitly discussed in this scenario. The focus is on broader security measures rather than verifying user identities.
- E. Incorrect.
Non-repudiation is not relevant to this scenario, as it deals with ensuring that actions or transactions cannot be denied by the parties involved, which is not the main focus here.