Understanding CIA and IAAA Principles

What does the 'C' in the CIA Triad stand for?

• Control

• Confidentiality

• Compliance

• Communication

Answer explanation

The 'C' in the CIA Triad stands for Confidentiality, which refers to protecting information from unauthorized access and ensuring that sensitive data is only accessible to those who are authorized.

Chloe is setting up a secure system for her online store. She needs to ensure that only authorized users can access the system. Which of the following is a component of the IAAA model that she should focus on?

• Integrity

• Authentication

• Availability

• Analysis

Answer explanation

Authentication is crucial for ensuring that only authorized users can access Chloe's online store. It verifies user identities, making it the key component of the IAAA model for her security needs.

Which technique is commonly used by companies like TechCorp to ensure data confidentiality when transmitting sensitive information over the internet?

• Encryption

• Hashing

• Data Redundancy

• Load Balancing

Answer explanation

Encryption is the primary technique used to protect sensitive data during transmission over the internet, ensuring that only authorized parties can access the information.

What is a method used for integrity verification?

• Digital Signatures

• Passwords

• Firewalls

• Biometrics

Answer explanation

Digital signatures are cryptographic tools that ensure data integrity and authenticity by allowing the recipient to verify that the message has not been altered and is from a legitimate sender.

Charlie is setting up a new software system for his company. Which of the following should he implement as an access control mechanism?

• Role-Based Access Control (RBAC)

• Data Encryption Standard (DES)

• Secure Sockets Layer (SSL)

• Simple Mail Transfer Protocol (SMTP)

Answer explanation

Role-Based Access Control (RBAC) is an effective access control mechanism that assigns permissions based on user roles, ensuring secure and efficient management of access to the software system.

Leo is setting up a secure network for his company's internal communications. Which protocol should he use for authentication in the network?

• Hypertext Transfer Protocol (HTTP)

• Kerberos

• File Transfer Protocol (FTP)

• Internet Protocol (IP)

Answer explanation

Kerberos is a secure authentication protocol designed for network communications, making it the best choice for Leo's internal network. HTTP and FTP are not primarily for authentication, while IP is a network layer protocol.

What does the 'I' in the CIA Triad represent?

• Identification

• Integrity

• Inspection

• Information

Answer explanation

The 'I' in the CIA Triad stands for Integrity, which refers to the accuracy and trustworthiness of data. It ensures that information is not altered or tampered with, making it a crucial aspect of information security.

Rosie is trying to access the school's online library system. Which component of the IAAA model is responsible for determining what Rosie can do within the system?

• Authentication

• Authorisation

• Accounting

• Access

Answer explanation

Authorisation determines what actions a user can perform within a system. In this case, it defines what Rosie can access in the school's online library system.

Emily is working on a project that involves handling sensitive customer data. Which of the following techniques should she use to maintain data confidentiality?

• Public Key Infrastructure (PKI)

• Data Masking

• Network Address Translation (NAT)

• Domain Name System (DNS)

Answer explanation

Data Masking is the correct choice as it protects sensitive customer data by obfuscating it, ensuring confidentiality while allowing data to be used for testing or analysis without exposing real information.

Neha is working on a project where she needs to ensure the data she receives from various sources has not been tampered with. What is a common method she can use for verifying data integrity?

• Checksums

• Firewalls

• Virtual Private Networks (VPNs)

• Proxy Servers

Answer explanation

Checksums are a common method for verifying data integrity. They generate a unique value based on the data, allowing Neha to check if the data has been altered. Other options like firewalls and VPNs focus on security, not integrity.