1.1 Describe the CIA Triad 200-201 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An e-commerce site experiences a DDoS attack that floods its web servers, causing customers to receive timeout errors. Which CIA principle is most directly affected?

   • AIntegrity, because the attack may corrupt transaction records
   • BAvailability, because legitimate users cannot access the service
   • CAccountability, because the attacker's identity is unknown
   • DConfidentiality, because customer data may be exposed during the attack
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security analyst suspects that an attacker modified a system log to hide malicious activity. Which technique would BEST help the analyst detect this tampering?

   • ACopy the logs to a USB drive daily
   • BStore logs on a remote, append-only log server
   • CCompress the logs to save disk space
   • DEncrypt the logs with the server's private key
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A hospital's electronic health record (EHR) system must be accessible to doctors during a ransomware attack that is encrypting files on the network. The EHR data is stored on a central server. Which proactive control would BEST ensure the system remains available?

   • AMaintain offline, immutable backups of the EHR database.
   • BRestrict internet access to the EHR server.
   • CEncrypt the EHR database at rest.
   • DUse a strong antivirus solution on all workstations.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A user receives a file that claims to be a software update, but the file's digital signature is invalid. Which CIA principle is most directly at risk if the user installs the file?

   • ANon-repudiation, because the sender cannot be identified
   • BAvailability, because the file may cause the system to crash
   • CIntegrity, because the file may have been modified from the original
   • DConfidentiality, because the file may contain malware that steals data
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A financial analyst downloads a spreadsheet of quarterly earnings. Later, the numbers appear altered, but the file's timestamp is unchanged. Which security goal has been violated?

   • AConfidentiality, because the data was accessed without authorization
   • BIntegrity, because the data was modified without authorization
   • CNon-repudiation, because the source of the change cannot be proven
   • DAvailability, because the data was not accessible when needed
   Reveal Solution Discussion Select an answer first