1.1 Describe the CIA Triad 200-201 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A system administrator notices that a configuration file on a critical server was modified at 2:00 AM, but no authorized administrator was logged in at that time. The file's permissions are correct and the change appears to be malicious. Which control would have BEST detected this change and helped identify the cause?

   • AA backup job that runs every night at 1:00 AM.
   • BFull-disk encryption on the server's hard drive.
   • CA strong password policy for all user accounts.
   • DFile integrity monitoring (FIM) with alerts and centralized audit logs.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A financial analyst downloads a spreadsheet from a shared drive, edits a few cells, and saves it. Later, the original file on the server is compared to the analyst's copy and the checksums differ. Which CIA principle is most directly affected, and what control would best detect this type of change?

   • AIntegrity; use file hashing and audit logging to verify and record changes.
   • BConfidentiality; encrypt the file with a strong algorithm.
   • CIntegrity; restrict write permissions to the file owner only.
   • DAvailability; implement a redundant file server with automatic failover.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A security team must protect a database that contains both highly sensitive customer PII and less-sensitive product catalog data. The team has a limited budget. Which approach best balances confidentiality, integrity, and availability?

   • AApply strong encryption and strict access controls only to the PII columns, and keep the product data open for performance
   • BEncrypt the entire database with the strongest algorithm and disable all non-essential queries
   • CMake regular backups and store them offsite, but do not implement access controls
   • DUse no encryption and rely on the database's built-in access controls
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A remote worker uses a public Wi-Fi network to access the company's internal web application. Which control would BEST protect the confidentiality of the data transmitted?

   • AAn antivirus program on the worker's device
   • BA firewall on the worker's laptop
   • CA VPN that encrypts all traffic between the worker's device and the company network
   • DA strong password for the Wi-Fi network
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company's employees use a shared network drive to store project files. The drive is accessible to all employees, but some files contain confidential information. The company wants to ensure that only authorized employees can access those files. Which control would BEST achieve this?

   • AUse a strong password for the network drive.
   • BEncrypt the entire network drive with BitLocker.
   • CMove the confidential files to a separate folder and share it with everyone.
   • DSet NTFS permissions on the confidential files to allow only the specific user group.
   Reveal Solution Discussion Select an answer first