1.1 Describe the CIA Triad 200-201 Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A security team must choose between two database encryption options: transparent data encryption (TDE) at the storage layer and application-level encryption of individual fields. The database is used by a reporting application that performs aggregate queries. The team is concerned about performance and the ability to search on encrypted data. Which choice best balances confidentiality and usability?

   • AUse TDE because it encrypts the entire database with minimal application changes and preserves all query functionality.
   • BUse no encryption because the database is behind a firewall.
   • CUse application-level encryption because it provides finer-grained control and protects data from database administrators.
   • DUse both TDE and application-level encryption to maximize security, even if it doubles the performance overhead.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A user's laptop is stolen. The laptop contains a file with sensitive customer data. Which control would BEST protect the confidentiality of that data?

   • AA BIOS password
   • BFull-disk encryption on the laptop
   • CA screensaver password
   • DA file checksum
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which security goal is most directly threatened by a denial-of-service (DoS) attack?

   • AConfidentiality
   • BIntegrity
   • CAvailability
   • DNon-repudiation
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A security analyst is investigating a breach. The analyst needs to prove that a specific log entry was not altered after it was written. Which control would BEST provide this assurance?

   • AStore the log in a plain text file on the same server
   • BCopy the log to a USB drive and keep it in the analyst's desk
   • CWrite the log entry to a cryptographic hash chain
   • DEncrypt the log file with a password known to the analyst
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A hospital's patient portal must allow doctors to view lab results only after they authenticate with a smartcard and PIN. The portal must remain reachable during a regional internet outage. Which combination of controls best satisfies both requirements?

   • ARequire smartcard and PIN for login, and place a read-only replica of the portal on the hospital's internal network.
   • BEnable multi-factor authentication (MFA) on the portal and host a redundant copy in a second cloud region.
   • CImplement single sign-on (SSO) and increase the portal's server capacity to handle peak load.
   • DUse a strong password policy and configure the portal's load balancer to fail over to a backup data center.
   Reveal Solution Discussion Select an answer first