1.1 Describe the CIA Triad 200-201 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A legal firm must share case files with outside counsel. The files contain sensitive client information. The firm wants to ensure that only the intended recipients can read the files and that the files have not been altered during transmission. Which combination of controls achieves both goals?

   • AEmail the files as attachments and rely on the email provider's TLS in transit.
   • BEncrypt the files with a shared password and send the password in a separate email.
   • CCompress the files into a ZIP archive and require a password to open it.
   • DUse a secure file transfer service with end-to-end encryption and a cryptographic hash of each file.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security architect is designing a system that must maintain the integrity of audit logs. The logs are stored on a central server. The architect is considering write-once-read-many (WORM) storage versus regular storage with access controls. Which factor is most important when choosing between the two?

   • ARegular storage with access controls is always sufficient because only authorized users can access the logs.
   • BRegular storage is more secure because it allows administrators to correct false log entries.
   • CWORM storage prevents modification or deletion of logs, even by administrators, which is critical for forensic integrity.
   • DWORM storage is faster to write to than regular storage.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company's website is hosted on a single server. During a traffic spike, the server becomes overloaded and the site goes down. Which solution would BEST maintain availability during future spikes?

   • AEnable full-disk encryption on the server
   • BUse a stronger password for the admin account
   • CDeploy the website on multiple servers behind a load balancer
   • DIncrease the server's firewall rules
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which definition best describes availability in the CIA triad?

   • AEnsuring that data and systems are accessible to authorized users when needed
   • BEnsuring that data is encrypted during storage
   • CEnsuring that data is accessible only to authorized users
   • DEnsuring that data is accurate and unaltered
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company's HR department sends a spreadsheet with employee salaries to the finance team. The spreadsheet is accidentally emailed to an unauthorized recipient. Which control would have BEST prevented this confidentiality breach?

   • ATraining employees to double-check email addresses before sending.
   • BEncrypting the spreadsheet with a password before sending.
   • CData loss prevention (DLP) that blocks emails containing sensitive data to unauthorized recipients.
   • DUsing a secure email gateway that scans for malware.
   Reveal Solution Discussion Select an answer first