1.1 Describe the CIA Triad 200-201 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A user receives an email with an attachment that, when opened, silently uploads a file from the user's computer to an external server. Which CIA principle is violated?

   • AAuthenticity, because the email sender was not verified
   • BConfidentiality, because the file was disclosed to an unauthorized party
   • CIntegrity, because the file was modified during upload
   • DAvailability, because the file is no longer accessible to the user
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An e-commerce site experiences a DDoS attack that floods its web servers. The security team wants to keep the site available to legitimate customers while the attack is mitigated. Which approach best balances availability and confidentiality?

   • ADeploy a web application firewall (WAF) with rate limiting and challenge-based filtering.
   • BEncrypt all web traffic with TLS to prevent the attacker from seeing the data.
   • CBlock all traffic from the attack's source IP ranges and increase server capacity.
   • DShut down the public website until the attack stops.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company's critical application must be accessible 24/7. The IT team implements redundant servers and automatic failover. Which CIA principle is this design primarily supporting?

   • AAuthenticity, because failover verifies user identities
   • BAvailability, because the application remains accessible even if one server fails
   • CConfidentiality, because redundant servers prevent data leaks
   • DIntegrity, because failover ensures data is not corrupted
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Why is it important to balance the three principles of the CIA triad in security design?

   • ABecause each principle requires the same level of security controls
   • BBecause focusing too heavily on one principle can weaken the others
   • CBecause all three principles are independent and do not affect each other
   • DBecause the CIA triad is a legal requirement that mandates equal implementation
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A security team must implement a solution for a database that contains personally identifiable information (PII). The database is used by a customer support application that needs to look up records by email address. The team is considering tokenization versus encryption. Which factor is most important when choosing between the two?

   • AEncryption allows the application to perform SQL queries on the encrypted data without any changes.
   • BEncryption is always more secure than tokenization because it uses stronger algorithms.
   • CTokenization replaces sensitive values with non-sensitive tokens, allowing the application to operate without exposing the original data.
   • DTokenization is reversible by anyone with access to the tokenization system, so it provides no confidentiality.
   Reveal Solution Discussion Select an answer first